Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2005-2769 Public exploit
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inje…
-
Unscored —
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitr…
-
Unscored —
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to …
-
Unscored —CVE-2004-2480 Public exploit
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via…
-
Unscored —
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2004-2303 Public exploit
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissio…
-
Unscored —CVE-2005-2295 Public exploit
NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero…
-
Unscored —CVE-2002-2016 Public exploit
User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute ar…
-
Unscored —CVE-2005-2256 Public exploit
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files …
-
Unscored —
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary…
-
Unscored —CVE-2005-2108 Public exploit
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitr…
-
Unscored —
mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang…
-
Unscored —CVE-2002-1827 Public exploit
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)…
-
Unscored —CVE-2002-1896 Public exploit
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a l…
-
Unscored —
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execut…
-
Unscored —
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote at…
-
Unscored —
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 functio…
-
Unscored —CVE-2005-1858 Public exploit
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a …
-
Unscored —CVE-2005-1807 Public exploit
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service…
-
Unscored —CVE-2005-1523 Public exploit
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows rem…
-
Unscored —CVE-2005-1520 Public exploit
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions bef…
-
Unscored —CVE-2005-1686 Public exploit
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a …
-
Unscored —CVE-2004-2093 Public exploit
Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a d…
-
Unscored —
Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file w…
-
Unscored —
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute…
-
Unscored —CVE-2004-1915 Public exploit
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execu…
-
Unscored —CVE-2004-1951 Public exploit
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite …
-
Unscored —CVE-2004-1897 Public exploit
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fa…
-
Unscored —CVE-2004-2014 Public exploit
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being d…
-
Unscored —CVE-2004-2026 Public exploit
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execut…
-
Unscored —
Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a …
-
Unscored —
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N…
-
Unscored —CVE-2005-1308 Public exploit
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter f…
-
Unscored —
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pa…
-
Unscored —
The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a de…
-
Unscored —
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attack…
-
Unscored —
The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loo…
-
Unscored —CVE-2001-1442 Public exploit
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privi…
-
Unscored —
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root pr…
-
Unscored —
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the rev…