Lucene search
+L
ArchlinuxMost viewed

1854 matches found

ArchLinux
ArchLinux
added 2015/03/19 12:00 a.m.59 views

openssl: multiple issues

CVE-2015-1787 denial of service If client auth is used then a server can segfault in the event of a DHE ciphersuite being selected and a zero length ClientKeyExchange message being sent by the client. This could be exploited in a DoS attack. - CVE-2015-0207 denial of service The DTLSv1listen...

6.8CVSS1.6AI score0.2946EPSS
SaveExploits0References14
ArchLinux
ArchLinux
added 2015/01/14 12:00 a.m.59 views

cpio: heap buffer overflow

A heap-based buffer overflow flaw was reported in cpio's listfile function. Attempting to extract a malicious cpio archive could cause cpio to crash or, potentially, execute arbitrary code. As noted in the original report, this issue could be trigger via other utilities, such as when running "les...

5CVSS3.5AI score0.07093EPSS
SaveExploits1References3
ArchLinux
ArchLinux
added 2014/12/08 12:00 a.m.59 views

mantisbt: multiple issues

CVE-2014-9272 cross-side scripting The function "stringinserthrefs" doesn't validate the protocol, which is why one can make a link that executes arbitrary JavaScript code. - CVE-2014-9270 cross-side scripting The Projax library does not properly escape html strings. An attacker could take...

7.5CVSS2.1AI score0.03145EPSS
SaveExploits6References32
ArchLinux
ArchLinux
added 2014/11/20 12:00 a.m.59 views

wireshark-gtk: denial of service

CVE-2014-8710 out-of-bounds read Out-of-bounds read flaw in the SigComp dissector sigcomp-udvm leads to denial of service while processing malformed packets. - CVE-2014-8711 out-of-bounds read The AMQP dissector is seeing a large value in the capture file for what it thinks should be a field...

5CVSS3.2AI score0.03792EPSS
SaveExploits0References15
ArchLinux
ArchLinux
added 2014/11/17 12:00 a.m.59 views

linux: local denial of service, privilege escalation

CVE-2014-3610: The WRMSR processing functionality in the KVM subsystem in the Linux kernel does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service host OS crash by leveraging guest OS privileges, relate...

4.9CVSS3.8AI score0.01168EPSS
SaveExploits7References10
ArchLinux
ArchLinux
added 2021/10/29 12:00 a.m.58 views

[ASA-202110-10] wpewebkit: multiple issues

Arch Linux Security Advisory ASA-202110-10 ========================================== Severity: Medium Date : 2021-10-29 CVE-ID : CVE-2021-30846 CVE-2021-30851 CVE-2021-42762 Package : wpewebkit Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2484 Summary ======= The...

8.8CVSS0.6AI score0.02394EPSS
SaveExploits1References9
ArchLinux
ArchLinux
added 2020/11/10 12:00 a.m.58 views

[ASA-202011-7] salt: multiple issues

Arch Linux Security Advisory ASA-202011-7 ========================================= Severity: Critical Date : 2020-11-10 CVE-ID : CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 Package : salt Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1262 Summary ======= The...

9.8CVSS1.1AI score0.99585EPSS
SaveExploits4References7
ArchLinux
ArchLinux
added 2018/12/12 12:00 a.m.58 views

[ASA-201812-9] firefox: multiple issues

Arch Linux Security Advisory ASA-201812-9 ========================================= Severity: Critical Date : 2018-12-12 CVE-ID : CVE-2018-12405 CVE-2018-12406 CVE-2018-12407 CVE-2018-17466 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18495 CVE-2018-18497 Package : firefox Type : multipl...

9.8CVSS0.2AI score0.09646EPSS
SaveExploits1References31
ArchLinux
ArchLinux
added 2018/12/08 12:00 a.m.58 views

[ASA-201812-6] lib32-openssl: private key recovery

Arch Linux Security Advisory ASA-201812-6 ========================================= Severity: Low Date : 2018-12-08 CVE-ID : CVE-2018-0734 CVE-2018-0735 Package : lib32-openssl Type : private key recovery Remote : Yes Link : https://security.archlinux.org/AVG-793 Summary ======= The package...

5.9CVSS1.5AI score0.12154EPSS
SaveExploits0References8
ArchLinux
ArchLinux
added 2017/12/17 12:00 a.m.58 views

[ASA-201712-11] lib32-openssl-1.0: multiple issues

Arch Linux Security Advisory ASA-201712-11 ========================================== Severity: Medium Date : 2017-12-17 CVE-ID : CVE-2017-3735 CVE-2017-3736 CVE-2017-3737 CVE-2017-3738 Package : lib32-openssl-1.0 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-480...

6.5CVSS0.4AI score0.78675EPSS
SaveExploits1References16
ArchLinux
ArchLinux
added 2017/11/08 12:00 a.m.58 views

[ASA-201711-15] lib32-openssl: multiple issues

Arch Linux Security Advisory ASA-201711-15 ========================================== Severity: Medium Date : 2017-11-08 CVE-ID : CVE-2017-3735 CVE-2017-3736 Package : lib32-openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-478 Summary ======= The package...

6.5CVSS0.7AI score0.17699EPSS
SaveExploits0References9
ArchLinux
ArchLinux
added 2017/09/18 12:00 a.m.58 views

[ASA-201709-15] apache: information disclosure

Arch Linux Security Advisory ASA-201709-15 ========================================== Severity: High Date : 2017-09-18 CVE-ID : CVE-2017-9798 Package : apache Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-404 Summary ======= The package apache before version...

7.5CVSS0.3AI score0.94999EPSS
SaveExploits9References6
ArchLinux
ArchLinux
added 2017/04/28 12:00 a.m.58 views

[ASA-201704-9] webkit2gtk: multiple issues

Arch Linux Security Advisory ASA-201704-9 ========================================= Severity: Critical Date : 2017-04-28 CVE-ID : CVE-2016-9642 CVE-2016-9643 CVE-2017-2367 CVE-2017-2376 CVE-2017-2377 CVE-2017-2386 CVE-2017-2392 CVE-2017-2394 CVE-2017-2395 CVE-2017-2396 CVE-2017-2405 CVE-2017-2415...

8.8CVSS4.7AI score0.09283EPSS
SaveExploits72References35
ArchLinux
ArchLinux
added 2017/01/27 12:00 a.m.58 views

[ASA-201701-32] linux: privilege escalation

Arch Linux Security Advisory ASA-201701-32 ========================================== Severity: Medium Date : 2017-01-27 CVE-ID : CVE-2017-2583 Package : linux Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-149 Summary ======= The package linux before version...

8.4CVSS0.7AI score0.00582EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2016/05/06 12:00 a.m.58 views

gd: arbitrary code execution

A heap-based buffer overflow caused by an integer signedness error has been found in the libgd code handling compressed gd2 chunks...

7.5CVSS3.2AI score0.36974EPSS
SaveExploits8References3
ArchLinux
ArchLinux
added 2016/04/01 12:00 a.m.58 views

jre7-openjdk: sandbox escape

It was discovered that the security fix for CVE-2013-5838 was incomplete and still allowed remote attackers to escape the Java security sandbox mechanism. The root problem is that the Reflection API does not properly guarantee type safety when Method Handle objects were invoked across two differe...

9.3CVSS2.8AI score0.05765EPSS
SaveExploits0References2
ArchLinux
ArchLinux
added 2016/01/09 12:00 a.m.58 views

wireshark-qt: denial of service

CVE-2015-8742 denial of service The dissectCPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service memory consumption or application crash via a...

4.3CVSS3.7AI score0.06764EPSS
SaveExploits28References25
ArchLinux
ArchLinux
added 2015/12/02 12:00 a.m.58 views

chromium: multiple issues

CVE-2015-6764: Out of bounds access in v8. Credit to Guang Gong of Qihoo 360 via pwn2own. - CVE-2015-6765, CVE-2015-6766, CVE-2015-6767: Use-after-free in AppCache. - CVE-2015-6768, CVE-2015-6770, CVE-2015-6772: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - CVE-2015-6769: Cross-origin...

10CVSS0.6AI score0.08115EPSS
SaveExploits9References1
ArchLinux
ArchLinux
added 2015/11/06 12:00 a.m.58 views

nss: arbitrary code execution

Several issues existed within the ASN.1 decoder used by NSS for handling streaming BER data. While the majority of NSS uses a separate, unaffected DER decoder, several public routines also accept BER data, and thus are affected. An attacker that successfully exploited these issues can overflow th...

7.5CVSS2.3AI score0.10238EPSS
SaveExploits0References3
ArchLinux
ArchLinux
added 2015/10/30 12:00 a.m.58 views

mariadb: denial of service

CVE-2015-4913 denial of service allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858. - CVE-2015-4870 denial of service allows remote authenticated users to affect availability via unknown vectors related to...

4CVSS4.6AI score0.30146EPSS
SaveExploits6References11
ArchLinux
ArchLinux
added 2015/10/23 12:00 a.m.58 views

jre8-openjdk: multiple issues

CVE-2015-4734 information disclosure It was discovered that the JGSS component of OpenJDK did not properly hide Kerberos realm information from all error exceptions when running under Security Manager. An untrusted Java application or applet could use this flaw to obtain certain information about...

10CVSS2.6AI score0.13354EPSS
SaveExploits0References25
ArchLinux
ArchLinux
added 2015/05/15 12:00 a.m.58 views

wireshark-qt: denial of service

CVE-2015-3808 denial of service There is an infinite loop condition in dissectlbmrpser in epan/dissectors/packet-lbmr.c. It's possible for an attacker to set the the variable 'optionlen' to 0, causing the loop to never terminate. This issue is leading to excessive CPU resources consumption by...

7.8CVSS1.5AI score0.03731EPSS
SaveExploits0References9
ArchLinux
ArchLinux
added 2015/03/20 12:00 a.m.58 views

tcpdump: multiple issues

CVE-2014-8767 denial of service Integer underflow in the olsrprint function when in verbose mode, allows remote attackers to cause a denial of service crash via a crafted length value in an OLSR frame. - CVE-2014-8768 denial of service Multiple Integer underflows in the geonetprint function, when...

7.5CVSS5.3AI score0.19807EPSS
SaveExploits15References9
ArchLinux
ArchLinux
added 2015/03/17 12:00 a.m.58 views

ettercap-gtk: multiple issues

CVE-2014-6395 arbitrary code execution Heap-based buffer overflow in the dissectorpostgresql function in dissectors/ecpostgresql.c allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value that is inconsistent with the actual...

7.5CVSS7.6AI score0.12674EPSS
SaveExploits6References11
ArchLinux
ArchLinux
added 2015/01/23 12:00 a.m.58 views

jdk8-openjdk: multiple issues

CVE-2014-3566 man-in-the-middle Nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. - CVE-2014-6549 arbitrary code execution Incorrect class loader permission check in ClassLoader...

10CVSS6.8AI score0.99999EPSS
SaveExploits13References20
ArchLinux
ArchLinux
added 2014/12/12 12:00 a.m.58 views

nvidia-304xx: arbitrary code execution

It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation...

7.5CVSS5.8AI score0.05192EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2019/11/13 12:00 a.m.57 views

[ASA-201911-12] linux-zen: arbitrary code execution

Arch Linux Security Advisory ASA-201911-12 ========================================== Severity: Critical Date : 2019-11-13 CVE-ID : CVE-2019-17666 Package : linux-zen Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1066 Summary ======= The package linux-zen...

8.8CVSS2AI score0.03017EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2019/06/19 12:00 a.m.57 views

[ASA-201906-18] firefox: arbitrary code execution

Arch Linux Security Advisory ASA-201906-18 ========================================== Severity: Critical Date : 2019-06-19 CVE-ID : CVE-2019-11707 Package : firefox Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-994 Summary ======= The package firefox befor...

8.8CVSS1.3AI score0.37696EPSS
SaveExploits8References5
ArchLinux
ArchLinux
added 2019/02/25 12:00 a.m.57 views

[ASA-201902-26] kibana: multiple issues

Arch Linux Security Advisory ASA-201902-26 ========================================== Severity: High Date : 2019-02-25 CVE-ID : CVE-2019-7608 CVE-2019-7609 CVE-2019-7610 Package : kibana Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-911 Summary ======= The package...

10CVSS2.4AI score0.95338EPSS
SaveExploits12References5
ArchLinux
ArchLinux
added 2018/01/29 12:00 a.m.57 views

[ASA-201801-21] rsync: multiple issues

Arch Linux Security Advisory ASA-201801-21 ========================================== Severity: High Date : 2018-01-29 CVE-ID : CVE-2017-16548 CVE-2017-17433 CVE-2017-17434 CVE-2018-5764 Package : rsync Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-542 Summary...

9.8CVSS3AI score0.06337EPSS
SaveExploits0References11
ArchLinux
ArchLinux
added 2017/04/21 12:00 a.m.57 views

[ASA-201704-6] firefox: multiple issues

Arch Linux Security Advisory ASA-201704-6 ========================================= Severity: Critical Date : 2017-04-21 CVE-ID : CVE-2017-5429 CVE-2017-5430 CVE-2017-5432 CVE-2017-5433 CVE-2017-5434 CVE-2017-5435 CVE-2017-5436 CVE-2017-5437 CVE-2017-5438 CVE-2017-5439 CVE-2017-5440 CVE-2017-5441...

9.8CVSS1.1AI score0.1853EPSS
SaveExploits29References108
ArchLinux
ArchLinux
added 2017/02/22 12:00 a.m.57 views

[ASA-201702-18] linux-zen: multiple issues

Arch Linux Security Advisory ASA-201702-18 ========================================== Severity: High Date : 2017-02-22 CVE-ID : CVE-2016-10088 CVE-2016-9588 CVE-2017-5986 CVE-2017-6074 Package : linux-zen Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-186 Summary...

7.8CVSS1.9AI score0.0596EPSS
SaveExploits13References9
ArchLinux
ArchLinux
added 2016/06/13 12:00 a.m.57 views

expat: multiple issues

CVE-2012-6702 predictable random numbers It was found that when calling XMLParse ahead of rand, it causes the pseudo random generator to generate non-random predictable numbers. - CVE-2016-5300 denial of service It was found that original fix for CVE-2012-0876 used too little entropy for the hash...

7.8CVSS2.2AI score0.06539EPSS
SaveExploits0References2
ArchLinux
ArchLinux
added 2016/06/08 12:00 a.m.57 views

qemu: multiple issues

CVE-2015-8558 denial of service An infinite-loop issue was found in the QEMU emulator built with USB EHCI emulation support. The flaw occurred during communication between the host controller interfaceEHCI and a respective device driver. These two communicate using an isochronous transfer...

7.2CVSS1.5AI score0.00916EPSS
SaveExploits0References6
ArchLinux
ArchLinux
added 2016/06/01 12:00 a.m.57 views

nginx-mainline: denial of service

A vulnerability was found in nginx code responsible for saving client request body to a temporary file. A specially crafted request might result in worker process crash due to a NULL pointer dereference while handling the client request body...

5CVSS1.5AI score0.16376EPSS
SaveExploits0References2
ArchLinux
ArchLinux
added 2016/03/10 12:00 a.m.57 views

exim: privilege escalation

All installations having Exim set-uid root and using 'perlstartup' are vulnerable to a local privilege escalation. Any user who can start an instance of Exim and this is normally any user can gain root privileges...

6.9CVSS3.8AI score0.05901EPSS
SaveExploits13References2
ArchLinux
ArchLinux
added 2016/03/09 12:00 a.m.57 views

libotr: arbitrary code execution

CVE-2016-2851 arbitrary code execution Versions 4.1.0 and earlier of libotr in 64-bit builds contain an integer overflow security flaw. This flaw could potentially be exploited by a remote attacker to cause a heap buffer overflow and subsequently for arbitrary code to be executed on the user's...

7.5CVSS6.5AI score0.254EPSS
SaveExploits5References2
ArchLinux
ArchLinux
added 2016/02/23 12:00 a.m.57 views

libssh: man-in-the-middle

libssh versions 0.1 and above have a bits/bytes confusion bug and generate the an anormaly short ephemeral secret for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. The resulting secret is 128 bits long, instead of the recommended sizes of 1024 and 2048 bits...

4.3CVSS1.1AI score0.02431EPSS
SaveExploits0References2
ArchLinux
ArchLinux
added 2015/04/01 12:00 a.m.57 views

firefox: multiple issues

CVE-2015-0801 same-origin bypass Mozilla developer Olli Pettay reported that while investigating Mozilla Foundation Security Advisory 2015-28, he and Mozilla developer Boris Zbarsky found an alternate way to trigger a similar vulnerability. The previously reported flaw used an issue with SVG...

7.5CVSS0.3AI score0.67268EPSS
SaveExploits4References24
ArchLinux
ArchLinux
added 2014/12/16 12:00 a.m.57 views

nss: signature forgery

The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding, as...

7.5CVSS2.8AI score0.99999EPSS
SaveExploits11References5
ArchLinux
ArchLinux
added 2014/12/12 12:00 a.m.57 views

nvidia-340xx: arbitrary code execution

It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation...

7.5CVSS5.8AI score0.05192EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2014/09/29 12:00 a.m.57 views

mediawiki: Cross-site Scripting (XSS)

It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting...

4.3CVSS2.2AI score0.01983EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2025/06/22 12:00 a.m.56 views

[ASA-202506-10] libblockdev: privilege escalation

Arch Linux Security Advisory ASA-202506-10 ========================================== Severity: High Date : 2025-06-22 CVE-ID : CVE-2025-6019 Package : libblockdev Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2905 Summary ======= The package libblockdev before...

7CVSS7.1AI score0.00461EPSS
SaveExploits18References4
ArchLinux
ArchLinux
added 2022/04/05 12:00 a.m.56 views

[ASA-202204-6] libtiff: multiple issues

Arch Linux Security Advisory ASA-202204-6 ========================================= Severity: High Date : 2022-04-05 CVE-ID : CVE-2022-0561 CVE-2022-0562 CVE-2022-0865 CVE-2022-0891 CVE-2022-0907 CVE-2022-0908 CVE-2022-0909 CVE-2022-0924 CVE-2022-22844 Package : libtiff Type : multiple issues...

7.7CVSS8.2AI score0.01542EPSS
SaveExploits9References34
ArchLinux
ArchLinux
added 2020/10/20 12:00 a.m.56 views

[ASA-202010-10] freetype2: arbitrary code execution

Arch Linux Security Advisory ASA-202010-10 ========================================== Severity: High Date : 2020-10-20 CVE-ID : CVE-2020-15999 Package : freetype2 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1254 Summary ======= The package freetype2 befo...

9.6CVSS1.3AI score0.44303EPSS
SaveExploits2References4
ArchLinux
ArchLinux
added 2020/06/02 12:00 a.m.56 views

[ASA-202006-1] firefox: multiple issues

Arch Linux Security Advisory ASA-202006-1 ========================================= Severity: High Date : 2020-06-02 CVE-ID : CVE-2020-12399 CVE-2020-12405 CVE-2020-12406 CVE-2020-12407 CVE-2020-12408 CVE-2020-12409 CVE-2020-12410 CVE-2020-12411 Package : firefox Type : multiple issues Remote : Y...

9.3CVSS0.7AI score0.01537EPSS
SaveExploits1References19
ArchLinux
ArchLinux
added 2020/04/08 12:00 a.m.56 views

[ASA-202004-9] chromium: multiple issues

Arch Linux Security Advisory ASA-202004-9 ========================================= Severity: High Date : 2020-04-08 CVE-ID : CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6432 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440...

8.8CVSS0.5AI score0.01977EPSS
SaveExploits8References48
ArchLinux
ArchLinux
added 2019/11/13 12:00 a.m.56 views

[ASA-201911-11] linux-lts: arbitrary code execution

Arch Linux Security Advisory ASA-201911-11 ========================================== Severity: Critical Date : 2019-11-13 CVE-ID : CVE-2019-17666 Package : linux-lts Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1065 Summary ======= The package linux-lts...

8.8CVSS2AI score0.03017EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2019/06/19 12:00 a.m.56 views

[ASA-201906-19] firefox-developer-edition: arbitrary code execution

Arch Linux Security Advisory ASA-201906-19 ========================================== Severity: Critical Date : 2019-06-19 CVE-ID : CVE-2019-11707 Package : firefox-developer-edition Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-995 Summary ======= The...

8.8CVSS1.3AI score0.37696EPSS
SaveExploits8References5
ArchLinux
ArchLinux
added 2019/06/17 12:00 a.m.56 views

[ASA-201906-12] linux-hardened: denial of service

Arch Linux Security Advisory ASA-201906-12 ========================================== Severity: High Date : 2019-06-17 CVE-ID : CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 Package : linux-hardened Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-986 Summary =======...

7.8CVSS0.3AI score0.98745EPSS
SaveExploits4References10
Total number of security vulnerabilities1854