Ecosystem

Debian

61,817 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,228 results · Clear filters · Feed

Unscored —

CVE-2006-0047 Public exploit

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted p…

freeciv Debian

Mar 7, 2006
Unscored —

CVE-2006-1046 Public exploit

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a stri…

monopd Debian

Mar 7, 2006
Unscored —

CVE-2006-1045 Public exploit

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled…

thunderbird Debian

Mar 7, 2006
Unscored —

CVE-2006-1010 Public exploit EPSS 18%

Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers t…

crossfire Debian

Mar 6, 2006
Unscored —

CVE-2006-0987 Public exploit EPSS 58%

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queri…

bind9 Debian

Mar 3, 2006
Unscored —

CVE-2006-0884 Public exploit

The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacke…

thunderbird Debian

Feb 24, 2006
Unscored —

CVE-2006-0806 Public exploit

Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow r…

cacti libphp-adodb Debian

Feb 21, 2006
Unscored —

CVE-2006-0460 Public exploit EPSS 68%

Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long erro…

bomberclone Debian

Feb 17, 2006
Unscored —

CVE-2006-0733 Public exploit

Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or H…

wordpress Debian

Feb 16, 2006
Unscored —

CVE-2006-0626 Public exploit

SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitr…

spip Debian

Feb 9, 2006
Unscored —

CVE-2006-0625 Public exploit

Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include…

spip Debian

Feb 9, 2006
Unscored —

CVE-2006-0295 Public exploit EPSS 71%

Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote atta…

thunderbird Debian

Feb 2, 2006
Unscored —

CVE-2006-0528 Public exploit EPSS 11%

The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause …

evolution Debian

Feb 2, 2006
Unscored —

CVE-2006-0518 Public exploit

Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier a…

spip Debian

Feb 2, 2006
Unscored —

CVE-2005-4676 Public exploit

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, …

exiv2 Debian

Jan 31, 2006
Unscored —

CVE-2005-4667 Public exploit

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename …

unzip Debian

Jan 25, 2006
Unscored —

CVE-2006-0146 Public exploit EPSS 13%

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuk…

cacti libphp-adodb Debian

Jan 9, 2006
Unscored —

CVE-2006-0147 Public exploit EPSS 13%

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple…

cacti libphp-adodb Debian

Jan 9, 2006
Unscored —

CVE-2005-3539 Public exploit EPSS 13%

Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary comman…

hylafax Debian

Jan 6, 2006
Unscored —

CVE-2005-4600 Public exploit

Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to…

wordpress Debian

Jan 1, 2006
Unscored —

CVE-2005-4584 Public exploit

BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign…

bzflag Debian

Dec 29, 2005
Unscored —

CVE-2005-4158 Public exploit

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT …

sudo Debian

Dec 11, 2005
Unscored —

CVE-2005-4065 Public exploit

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbit…

trac Debian

Dec 7, 2005
Unscored —

CVE-2004-2631 Public exploit

Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote a…

phpmyadmin Debian

Dec 4, 2005
Unscored —

CVE-2005-3980 Public exploit

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attacker…

trac Debian

Dec 4, 2005
Unscored —

CVE-2005-3862 Public exploit EPSS 20%

Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archi…

unalz Debian

Nov 29, 2005
Unscored —

CVE-2005-3737 Public exploit EPSS 13%

Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute…

inkscape Debian

Nov 22, 2005
Unscored —

CVE-2005-3559 Public exploit EPSS 20%

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access …

asterisk Debian

Nov 16, 2005
Unscored —

CVE-2005-3524 Public exploit EPSS 21%

Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitra…

linux-ftpd-ssl Debian

Nov 7, 2005
Unscored —

CVE-2005-3487 Public exploit

Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via var…

scorched3d Debian

Nov 3, 2005
Unscored —

CVE-2005-3486 Public exploit EPSS 11%

Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary…

scorched3d Debian

Nov 3, 2005
Unscored —

CVE-2005-3488 Public exploit EPSS 10%

Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via …

scorched3d Debian

Nov 3, 2005
Unscored —

CVE-2005-3301 Public exploit

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arb…

phpmyadmin Debian

Oct 24, 2005
High 7.3

CVE-2005-3302 Public exploit

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a h…

blender Debian

Oct 24, 2005
Unscored —

CVE-2005-3299 Public exploit EPSS 16%

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to i…

phpmyadmin Debian

Oct 23, 2005
Unscored —

CVE-2005-3120 Public exploit EPSS 23%

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbi…

lynx Debian

Oct 17, 2005
Unscored —

CVE-2005-2661 Public exploit EPSS 12%

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows …

up-imapproxy Debian

Oct 14, 2005
Unscored —

CVE-2005-0023 Public exploit

gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY env…

vte Debian

Oct 5, 2005
Unscored —

CVE-2005-2878 Public exploit EPSS 15%

Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to …

mailutils Debian

Sep 13, 2005
Unscored —

CVE-2005-2869 Public exploit

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitra…

phpmyadmin Debian

Sep 8, 2005