Ecosystem
Debian
61,812 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 171
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,227 results · Clear filters · Feed
-
Critical 9.8CVE-2019-19919 Public exploit
Prototype Pollution in handlebars
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payl…
-
Critical 9.8
Deserialization of Untrusted Data in Log4j
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log dat…
-
Unscored —CVE-2019-19905 Public exploit
NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration …
-
Critical 9.8
Django Potential account hijack via password reset form
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a pa…
-
Unscored —CVE-2019-8820 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPa…
-
Unscored —CVE-2019-8765 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Pro…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8690 Public exploit
A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This …
-
Unscored —CVE-2019-8671 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS …
-
Unscored —CVE-2019-8649 Public exploit
A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state managemen…
-
Unscored —CVE-2019-8622 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8611 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8623 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8601 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …
-
Unscored —CVE-2019-8558 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…
KEV May 4, 2022 -
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 1…
-
Unscored —CVE-2018-1311 Public exploit
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external…
-
Unscored —CVE-2019-19241 Public exploit
In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabil…
-
Unscored —
Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.
-
Unscored —CVE-2019-13764 Public exploit
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit he…
-
Unscored —CVE-2014-0242 Public exploit
mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive inf…
-
Unscored —CVE-2019-19447 Public exploit
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can le…
-
High 7.8CVE-2019-18276 Public exploit
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run wi…
-
High 8.0CVE-2019-10220 Public exploit
Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
-
Unscored —
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user co…
-
Medium 6.5
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially explo…
KEV Jun 8, 2022 -
High 8.8
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap…
KEV May 23, 2022 -
Medium 4.7CVE-2019-10207 Public exploit
A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and ke…
-
Medium 4.5CVE-2019-11287 Public exploit
RabbitMQ Web Management Plugin DoS via heap overflow
Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack…
-
Unscored —CVE-2019-19203 Public exploit
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCh…
-
Unscored —CVE-2019-19204 Public exploit
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…
-
Unscored —CVE-2019-18890 Public exploit
A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected…
-
Unscored —CVE-2012-1257 Public exploit
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information v…
-
Unscored —CVE-2011-4919 Public exploit
mpack 1.6 has information disclosure via eavesdropping on mails sent by other users
-
High 7.5CVE-2019-12422 Public exploit
Improper input validation in Apache Shiro
Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
-
Medium 5.9
Improper Restriction of XML External Entity Reference in jackson-mapper-asl
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.
-
Unscored —
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-b…
-
Unscored —CVE-2019-18885 Public exploit
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a craf…