Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2006-3815 Public exploit
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local …
-
Unscored —CVE-2006-3682 Public exploit
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) y…
-
Unscored —
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ea…
-
Unscored —
Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execu…
-
Unscored —CVE-2006-3355 Public exploit
Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2006-3324 Public exploit
The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 80…
-
Unscored —CVE-2006-3325 Public exploit
client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier al…
-
Unscored —CVE-2006-3082 Public exploit
parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of serv…
-
Unscored —
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2…
-
Unscored —CVE-2006-2875 Public exploit
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple p…
-
Unscored —
SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute …
-
Unscored —CVE-2006-2723 Public exploit
Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that…
-
Unscored —
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file th…
-
Unscored —
Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execut…
-
Unscored —CVE-2006-2575 Public exploit
The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of …
-
Unscored —
Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file w…
-
Unscored —CVE-2006-2480 Public exploit
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibl…
-
Unscored —CVE-2006-2465 Public exploit
Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if …
-
Medium —CVE-2006-2458 Public exploit
Libextractor multiple heap-based buffer overflows
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (pl…
-
Unscored —CVE-2006-2413 Public exploit
GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption…
-
High 7.3
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GN…
-
Unscored —
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbi…
-
Unscored —CVE-2006-2236 Public exploit
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III…
-
Unscored —CVE-2006-2230 Public exploit
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of …
-
Unscored —
Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of…
-
Unscored —CVE-2006-2024 Public exploit
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a T…
-
Unscored —
Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attac…
-
Unscored —CVE-2006-2016 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject …
-
Unscored —CVE-2006-1945 Public exploit
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arb…
-
Unscored —
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-1803 Public exploit
Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-1702 Public exploit
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-0053 Public exploit
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by…
-
Unscored —
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by tri…
-
Unscored —CVE-2006-1356 Public exploit
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to…
-
Unscored —CVE-2006-0745 Public exploit
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid func…
-
Unscored —CVE-2006-1258 Public exploit
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script o…
-
Unscored —
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitra…
-
Unscored —
Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating …