Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2010-2482 Public exploit
LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to…
-
Unscored —
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, migh…
-
Unscored —CVE-2010-2435 Public exploit
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode characte…
-
Unscored —
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as…
-
Unscored —CVE-2010-1748 Public exploit
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS …
-
Unscored —
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.…
-
Medium —CVE-2010-2273 Public exploit
Cross-Site Scripting in dojo
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly …
-
Unscored —CVE-2010-2275 Public exploit
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote a…
-
Unscored —
ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)…
-
Unscored —
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier a…
-
Unscored —
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengt…
-
Unscored —CVE-2010-1457 Public exploit
Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -…
-
Unscored —CVE-2010-1869 Public exploit
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to e…
-
Unscored —CVE-2010-1431 Public exploit
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbi…
-
Unscored —
Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1…
-
Unscored —
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a…
-
Unscored —
The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy serv…
-
Unscored —CVE-2010-1132 Public exploit
The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allo…
-
Unscored —
The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial…
-
Unscored —
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writabl…
-
Unscored —CVE-2010-0426 Public exploit
sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name…
-
Unscored —
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct reques…
-
Unscored —
Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allow…
-
Unscored —
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-1…
-
Unscored —
FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown…
-
Unscored —CVE-2010-0411 Public exploit
Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp…
-
Unscored —
lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows r…
-
Unscored —
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remot…
-
Unscored —
stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in s…
-
Unscored —CVE-2010-0364 Public exploit
Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitra…
-
Unscored —
mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attacke…
-
Unscored —CVE-2009-4495 Public exploit
Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …
-
Critical 9.8
Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…
-
Unscored —
nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers …
-
Unscored —
Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allo…
-
Unscored —
The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via…
-
Unscored —CVE-2009-4499 Public exploit
SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6…
-
Unscored —CVE-2009-4501 Public exploit
The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause …
-
Unscored —
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote at…
-
Unscored —CVE-2009-4427 Public exploit
Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arb…