Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2004-0158 Public exploit
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable…
-
Unscored —
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remo…
-
Unscored —CVE-2003-1029 Public exploit
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite lo…
-
Unscored —
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers …
-
Unscored —CVE-2003-0967 Public exploit
rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RAD…
-
Unscored —
Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.
-
Unscored —
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or …
-
Unscored —CVE-2003-0854 Public exploit
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, …
-
Unscored —
Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arb…
-
Unscored —CVE-2003-0864 Public exploit
Buffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of …
-
Unscored —
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL cli…
-
Unscored —CVE-2003-0833 Public exploit
Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories tha…
-
Unscored —
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cl…
-
Unscored —CVE-2003-0805 Public exploit
Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary…
-
Unscored —
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient…
-
Unscored —
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, …
-
Unscored —CVE-2003-0706 Public exploit
Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).
-
Unscored —CVE-2003-0705 Public exploit
Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.
-
Unscored —CVE-2003-0740 Public exploit
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users t…
-
Unscored —CVE-2003-0723 Public exploit
Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code.
-
Unscored —CVE-2002-1566 Public exploit
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to…
-
Unscored —CVE-2003-0645 Public exploit
man-db 2.3.12 and 2.3.18 to 2.4.1 uses certain user-controlled DEFINE directives from the ~/.manpath file, even when ru…
-
Unscored —
The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (…
-
Unscored —CVE-2003-0625 Public exploit
Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malfor…
-
Unscored —CVE-2003-0620 Public exploit
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via …
-
Unscored —CVE-2003-0536 Public exploit
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory…
-
Unscored —CVE-2003-0454 Public exploit
Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environmen…
-
Unscored —
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary comm…
-
Unscored —
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long…
-
Unscored —CVE-2003-0385 Public exploit
Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long …
-
Unscored —CVE-2003-0380 Public exploit
Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cau…
-
Unscored —CVE-2003-0396 Public exploit
Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges…
-
Unscored —CVE-2003-0390 Public exploit
Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, …
-
Unscored —
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port …
-
Unscored —CVE-2003-0358 Public exploit
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allo…
-
Unscored —
Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.4…
-
Unscored —CVE-2003-0328 Public exploit
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a…
-
Unscored —
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters be…
-
Unscored —
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user …
-
Unscored —
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fi…