Debian

56 results · Clear filters · Feed

• Critical 9.8
  CVE-2020-7247 Exploited Public exploit Scanner template EPSS 99%

  smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to…

  opensmtpd opensmtpd opensmtpd Debian Ubuntu Alpine
  Jan 29, 2020

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2019-16928 Exploited EPSS 42%

  Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-b…

  exim4 exim Debian Alpine
  Sep 27, 2019

  KEV Mar 3, 2022
• Critical 10.0
  CVE-2019-11708 Exploited Public exploit EPSS 56%

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• Critical 9.0
  CVE-2019-10149 Exploited Public exploit EPSS 100%

  A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message…

  Exim Exim exim4 exim4 Debian Ubuntu Alpine
  Jun 5, 2019

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2018-6789 Exploited · Ransomware Public exploit EPSS 82%

  An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted me…

  exim4 exim4 exim Debian Ubuntu Alpine
  Feb 8, 2018

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2015-7501 Exploited Public exploit Scanner template EPSS 86%

  Deserialization of Untrusted Data in Apache commons collections

  Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal …

  org.apache.commons:commons-collections4 libcommons-collections3-java net.sourceforge.collections:collections-generic org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections Debian Ubuntu Maven
  Nov 9, 2017
• Critical 9.8
  CVE-2017-9841 Exploited Public exploit Scanner template EPSS 100%

  Code Injection in PHPUnit

  Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

  phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
  Jun 27, 2017

  KEV Feb 15, 2022
• Critical 9.8
  CVE-2017-7494 Exploited · Ransomware Public exploit EPSS 99%

  Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…

  Samba Samba samba samba Debian Ubuntu Azure Linux Alpine
  May 30, 2017

  KEV Mar 30, 2023
• Critical 9.8
  CVE-2016-10033 Exploited Public exploit Scanner template EPSS 100%

  Remote code execution in PHPMailer

  The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

  phpmailer/phpmailer libphp-phpmailer libphp-phpmailer php-phpmailer Debian Ubuntu Alpine Packagist
  Dec 30, 2016

  KEV Jul 7, 2025
• Critical 9.8
  CVE-2016-4437 Exploited Public exploit Scanner template EPSS 93%

  Improper Access Control in Apache Shiro

  Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

  shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
  Jun 7, 2016

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2016-3088 Exploited Public exploit Scanner template EPSS 98%

  Improper Input Validation in Apache ActiveMQ

  The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

  activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven
  Jun 1, 2016

  KEV Feb 10, 2022
• Critical 10.0
  CVE-2015-3306 Exploited Public exploit Scanner template EPSS 99%

  The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

  proftpd-dfsg proftpd-dfsg Debian Ubuntu
  May 18, 2015

  KEV Oct 8, 2026
• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

  bash bash Debian Ubuntu
  Sep 24, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2010-4344 Exploited Public exploit EPSS 72%

  Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…

  exim4 Debian
  Dec 14, 2010

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2009-1151 Exploited Public exploit Scanner template EPSS 97%

  Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

  phpmyadmin Debian
  Mar 26, 2009

  KEV Mar 25, 2022