Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in …
-
Unscored —
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a den…
-
Unscored —
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log f…
-
Unscored —CVE-2011-0538 Public exploit
Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .p…
-
Unscored —
demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to…
-
Unscored —
The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/cod…
-
Unscored —
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pa…
-
Unscored —CVE-2010-3879 Public exploit
FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently …
-
High —
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by t…
-
Unscored —
The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows …
-
Unscored —
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3,…
-
Unscored —
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2…
-
Unscored —
Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote …
-
Unscored —
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use…
-
Unscored —
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pr…
-
Unscored —CVE-2010-1677 Public exploit
MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed wi…
-
Unscored —CVE-2010-3906 Public exploit
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web …
-
Critical 9.8
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…
KEV Mar 25, 2022 -
High 7.8
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to speci…
KEV Mar 25, 2022 -
Unscored —CVE-2010-4480 Public exploit
error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site s…
-
Unscored —CVE-2010-4170 Public exploit
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allo…
-
Unscored —
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application cra…
-
Unscored —
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute ar…
-
Unscored —
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector …
-
Unscored —
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow re…
-
Unscored —
Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute a…
-
Unscored —CVE-2010-3070 Public exploit
Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attacke…
-
Unscored —CVE-2010-3306 Public exploit
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers …
-
Unscored —CVE-2010-3484 Public exploit
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-3485 Public exploit
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-3073 Public exploit
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for…
-
Unscored —CVE-2010-2543 Public exploit
Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers…
-
Unscored —CVE-2010-2544 Public exploit
Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance C…
-
Unscored —CVE-2008-7258 Public exploit
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service…
-
Unscored —CVE-2010-2939 Public exploit
Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a…
-
Unscored —
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interp…
-
Unscored —CVE-2010-2785 Public exploit
The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ (backslash) characters, which a…
-
Unscored —
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_norma…
-
Unscored —CVE-2010-2630 Public exploit
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that h…
-
Unscored —CVE-2010-2631 Public exploit
LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly h…