Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2005-1061 Public exploit
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via c…
-
Unscored —
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote att…
-
Unscored —
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is …
-
Unscored —CVE-2005-0992 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject …
-
Unscored —
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote a…
-
Unscored —CVE-2005-0870 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote a…
-
Unscored —CVE-2005-0838 Public exploit
Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possi…
-
Unscored —CVE-2003-1092 Public exploit
Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3…
-
Unscored —CVE-2004-1735 Public exploit
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticat…
-
Unscored —CVE-2004-1717 Public exploit
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary…
-
Unscored —CVE-2004-1737 Public exploit
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-0161 Public exploit
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE arch…
-
Unscored —CVE-2005-0543 Public exploit
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web s…
-
Unscored —
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with…
-
Unscored —CVE-2004-1689 Public exploit
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbi…
-
Unscored —
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —CVE-2004-1559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2005-0105 Public exploit
Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.
-
Unscored —
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which …
-
Unscored —CVE-2005-0436 Public exploit
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of…
-
Unscored —CVE-2005-0435 Public exploit
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginm…
-
Unscored —CVE-2005-0438 Public exploit
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug paramete…
-
Unscored —CVE-2004-1484 Public exploit
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy cl…
-
Unscored —CVE-2004-1471 Public exploit
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attacke…
-
Unscored —
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP reque…
-
Unscored —CVE-2004-1405 Public exploit
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, s…
-
Unscored —CVE-2005-0155 Public exploit
The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbit…
-
Unscored —CVE-2005-0156 Public exploit
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local us…
-
Unscored —
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7…
-
Unscored —
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel na…
-
Unscored —
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —CVE-2005-0021 Public exploit
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address wit…
-
Unscored —CVE-2004-1267 Public exploit
Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote atta…
-
Unscored —
Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for …
-
Unscored —
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitr…
-
Unscored —
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via …
-
Unscored —
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote at…
-
Unscored —CVE-2004-1269 Public exploit
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing t…
-
Unscored —
Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary co…
-
Unscored —
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers t…