Skip to content
OpenAdvisories

Ecosystem

Debian

61,835 known vulnerabilities.

Most affected packages

linux 20,203 chromium 5,831 linux-6.12 2,889 firefox-esr 1,430 thunderbird 1,395 webkit2gtk 960 imagemagick 867 wireshark 771 wpewebkit 597 xen 487 ffmpeg 442 qemu 442 gpac 393 wordpress 354 freerdp2 319 binutils 301 openssl 296 mediawiki 285 tiff 272 apache2 270 phpmyadmin 263 vim 258 freerdp3 248 asterisk 229 curl 222 samba 204 nvidia-graphics-drivers 198 tcpdump 187 cacti 175 glibc 173 clamav 169 ghostscript 168 python-django 164 bind9 159 wolfssl 151 xorg-server 151 openjdk-17 150 nvidia-graphics-drivers-tesla-470 148 graphicsmagick 147 golang-1.19 143
All Critical High Medium Low Exploited only Public exploit

846 results · Clear filters · Feed

  • High —
    CVE-2011-2506 Public exploit

    phpMyAdmin vulnerable to static code injection

    setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the abil…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High —
    CVE-2010-4335 Public exploit EPSS 55%

    CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code

    The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by t…

    cakephp/cakephp cakephp Debian Packagist
  • High 7.8
    CVE-2010-4345 Exploited Public exploit EPSS 18%

    Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to speci…

    exim4 Debian
    KEV Mar 25, 2022
  • High —
    CVE-2008-5619 Public exploit EPSS 59%

    PHPMailer susceptible to arbitrary code execution

    html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is proc…

    roundcube phpmailer/phpmailer Debian Packagist
  • High 7.3
    CVE-2006-2362 Public exploit EPSS 14%

    Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GN…

    binutils Debian
  • High 7.3
    CVE-2005-3302 Public exploit

    Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a h…

    blender Debian