Debian

3,228 results · Clear filters · Feed

• Unscored —
  CVE-2007-3140 Public exploit

  SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL c…

  wordpress Debian
  Jun 8, 2007
• Unscored —
  CVE-2007-2894 Public exploit

  The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of …

  bochs Debian
  May 30, 2007
• Unscored —
  CVE-2007-2865 Public exploit

  Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary…

  phppgadmin Debian
  May 25, 2007
• Unscored —
  CVE-2007-2821 Public exploit

  SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbit…

  wordpress Debian
  May 22, 2007
• Unscored —
  CVE-2007-2807 Public exploit

  Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted,…

  eggdrop Debian
  May 22, 2007
• Unscored —
  CVE-2007-2714 Public exploit EPSS 11%

  Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact…

  wordpress Web / CMS Debian
  May 16, 2007
• Unscored —
  CVE-2007-2683 Public exploit

  Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, …

  mutt Debian
  May 15, 2007
• Unscored —
  CVE-2007-2645 Public exploit EPSS 13%

  Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted…

  libexif Debian
  May 14, 2007
• Unscored —
  CVE-2007-2446 Public exploit EPSS 78%

  Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers…

  samba Debian
  May 14, 2007
• Unscored —
  CVE-2007-2447 Public exploit EPSS 50%

  The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands…

  samba Debian
  May 14, 2007
• Unscored —
  CVE-2007-2524 Public exploit

  Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers…

  otrs2 Debian
  May 8, 2007
• Unscored —
  CVE-2007-2437 Public exploit

  The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows rem…

  xorg-server Debian
  May 2, 2007
• Unscored —
  CVE-2007-2356 Public exploit EPSS 16%

  Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user…

  gimp Debian
  Apr 30, 2007
• Medium 5.3
  CVE-2007-2353 Public exploit EPSS 28%

  Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

  Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

  axis org.apache.axis:axis Debian Maven
  Apr 30, 2007
• Unscored —
  CVE-2007-2293 Public exploit EPSS 24%

  Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in A…

  asterisk Debian
  Apr 26, 2007
• Unscored —
  CVE-2007-2057 Public exploit EPSS 19%

  Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafte…

  aircrack-ng Debian
  Apr 18, 2007
• Unscored —
  CVE-2007-2027 Public exploit

  Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11…

  elinks Debian
  Apr 13, 2007
• Unscored —
  CVE-2006-4250 Public exploit

  Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted ar…

  man-db Debian
  Apr 10, 2007
• Unscored —
  CVE-2007-1897 Public exploit

  SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticate…

  wordpress Debian
  Apr 9, 2007
• Unscored —
  CVE-2007-1001 Public exploit

  Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP …

  libgd2 Debian
  Apr 6, 2007
• Unscored —
  CVE-2007-1804 Public exploit

  PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LE…

  pulseaudio Debian
  Apr 2, 2007
• Unscored —
  CVE-2007-1622 Public exploit

  Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in t…

  wordpress Debian
  Mar 23, 2007
• Unscored —
  CVE-2007-1561 Public exploit EPSS 15%

  The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of servic…

  asterisk Debian
  Mar 21, 2007
• Unscored —
  CVE-2007-1540 Public exploit

  Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows…

  sql-ledger Debian
  Mar 20, 2007
• Unscored —
  CVE-2007-1536 Public exploit EPSS 14%

  Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execu…

  file Debian
  Mar 20, 2007
• Unscored —
  CVE-2007-1306 Public exploit EPSS 21%

  Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending…

  asterisk Debian
  Mar 7, 2007
• Unscored —
  CVE-2007-1264 Public exploit

  Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail…

  enigmail Debian
  Mar 6, 2007
• Unscored —
  CVE-2007-1266 Public exploit

  Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolutio…

  evolution Debian
  Mar 6, 2007
• Unscored —
  CVE-2007-1263 Public exploit

  GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed an…

  gnupg2 gpgme1.0 Debian
  Mar 6, 2007
• Unscored —
  CVE-2007-0774 Public exploit EPSS 82%

  Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apac…

  libapache-mod-jk Debian
  Mar 4, 2007
• Unscored —
  CVE-2007-1244 Public exploit

  Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attacker…

  wordpress Debian
  Mar 3, 2007
• Unscored —
  CVE-2007-1049 Public exploit

  Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/f…

  wordpress Debian
  Feb 21, 2007
• Unscored —
  CVE-2007-0540 Public exploit

  WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service c…

  wordpress Debian
  Jan 29, 2007
• Unscored —
  CVE-2007-0010 Public exploit

  The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to…

  gtk+2.0 Debian
  Jan 24, 2007
• Unscored —
  CVE-2006-6942 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbit…

  phpmyadmin Debian
  Jan 19, 2007
• Unscored —
  CVE-2006-6943 Public exploit

  PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/che…

  phpmyadmin Debian
  Jan 19, 2007
• Unscored —
  CVE-2007-0256 Public exploit EPSS 12%

  VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.

  vlc Debian
  Jan 16, 2007
• Unscored —
  CVE-2007-0247 Public exploit EPSS 20%

  squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craf…

  squid Debian
  Jan 16, 2007
• Unscored —
  CVE-2007-0235 Public exploit

  Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local use…

  libgtop2 Debian
  Jan 16, 2007
• Unscored —
  CVE-2007-0233 Public exploit EPSS 12%

  wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeri…

  wordpress Debian
  Jan 13, 2007