Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2012-3826 Public exploit
Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a d…
-
Unscored —CVE-2012-2394 Public exploit
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data …
-
Unscored —CVE-2012-2393 Public exploit
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 doe…
-
Unscored —CVE-2012-2392 Public exploit
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loo…
-
Unscored —
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop …
-
Unscored —CVE-2012-2698 Public exploit
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.…
-
Unscored —
Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause …
-
Unscored —
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and…
-
Unscored —
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in …
-
Unscored —CVE-2012-0946 Public exploit
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-n…
-
Unscored —CVE-2012-2396 Public exploit
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicat…
-
Unscored —
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 befor…
-
Unscored —CVE-2012-0067 Public exploit
wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of …
-
Unscored —
epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows …
-
Unscored —
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valid…
-
Unscored —
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2012-1663 Public exploit
Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (ap…
-
Unscored —CVE-2012-0834 Public exploit
Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attacke…
-
Unscored —
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting t…
-
Unscored —CVE-2012-0809 Public exploit
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbi…
-
Unscored —CVE-2011-4898 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messag…
-
Unscored —CVE-2011-4899 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specifi…
-
Unscored —CVE-2012-0937 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MyS…
-
Unscored —CVE-2012-0782 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordP…
-
Unscored —
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…
-
Unscored —CVE-2012-0031 Public exploit
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …
-
Unscored —
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute ar…
-
Unscored —
Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products…
-
Unscored —CVE-2011-5025 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inje…
-
Unscored —
The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTT…
-
Unscored —
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka …
-
Unscored —
Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lightt…
-
Unscored —CVE-2011-4674 Public exploit
SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows re…
-
Unscored —
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, wh…
-
Unscored —
The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 …
-
Medium 6.5
phpMyAdmin vulnerable to XML external entity (XXE) injection attack
The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, …
-
Unscored —CVE-2011-4415 Public exploit
The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when …
-
Unscored —CVE-2011-3607 Public exploit
Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x t…
-
Unscored —CVE-2011-4074 Public exploit
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to injec…
-
Unscored —
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrar…