Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
-
Unscored —CVE-2004-0996 Public exploit
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrit…
-
Unscored —
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to b…
-
Unscored —
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP …
-
Unscored —
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attacker…
-
Unscored —
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to …
-
Unscored —
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of …
-
Unscored —
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allow…
-
Unscored —CVE-2004-0186 Public exploit
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting…
-
Unscored —CVE-2004-0129 Public exploit
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitra…
-
Unscored —
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …
-
Unscored —
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail me…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26,…
-
Unscored —CVE-2002-1381 Public exploit
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative use…
-
Unscored —
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addr…
-
Unscored —CVE-2002-1405 Public exploit
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTT…
-
Unscored —
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute …
-
Unscored —CVE-2002-1307 Public exploit
Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML…
-
Unscored —
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) vi…
-
Unscored —
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are…
-
Unscored —
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an …
-
Unscored —
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly e…
-
Unscored —CVE-2003-0102 Public exploit
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user run…
-
Unscored —
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when …
-
Unscored —
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 all…
-
Unscored —
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute …
-
Unscored —
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitr…
-
Unscored —
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memo…
-
Unscored —CVE-2004-0591 Public exploit
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly …
-
Unscored —CVE-2004-0548 Public exploit
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local user…
-
Unscored —
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may …
-
Unscored —
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when com…
-
Unscored —
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attacke…
-
Unscored —
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allow…
-
Unscored —
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code …
-
Unscored —
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows re…
-
Unscored —
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial …
-
Unscored —
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute a…
-
Unscored —
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of ser…
-
Unscored —
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, al…