Lucene search
+L
ArchlinuxMost viewed

1854 matches found

ArchLinux
ArchLinux
•added 2021/11/18 12:00 a.m.•48 views

[ASA-202111-8] opera: multiple issues

Arch Linux Security Advisory ASA-202111-8 ========================================= Severity: High Date : 2021-11-18 CVE-ID : CVE-2021-37997 CVE-2021-37998 CVE-2021-37999 CVE-2021-38000 CVE-2021-38001 CVE-2021-38002 CVE-2021-38003 CVE-2021-38004 Package : opera Type : multiple issues Remote : Yes...

9.6CVSS8.3AI score0.38573EPSS
SaveExploits5References19
ArchLinux
ArchLinux
•added 2021/11/05 12:00 a.m.•48 views

[ASA-202111-1] jenkins: multiple issues

Arch Linux Security Advisory ASA-202111-1 ========================================= Severity: Critical Date : 2021-11-05 CVE-ID : CVE-2021-21685 CVE-2021-21686 CVE-2021-21687 CVE-2021-21688 CVE-2021-21689 CVE-2021-21690 CVE-2021-21691 CVE-2021-21692 CVE-2021-21693 CVE-2021-21694 CVE-2021-21695...

9.8CVSS9.1AI score0.02451EPSS
SaveExploits0References17
ArchLinux
ArchLinux
•added 2020/05/07 12:00 a.m.•48 views

[ASA-202005-5] qutebrowser: certificate verification bypass

Arch Linux Security Advisory ASA-202005-5 ========================================= Severity: Low Date : 2020-05-07 CVE-ID : CVE-2020-11054 Package : qutebrowser Type : certificate verification bypass Remote : Yes Link : https://security.archlinux.org/AVG-1152 Summary ======= The package...

4.3CVSS0.4AI score0.0151EPSS
SaveExploits0References5
ArchLinux
ArchLinux
•added 2020/04/22 12:00 a.m.•48 views

[ASA-202004-20] chromium: multiple issues

Arch Linux Security Advisory ASA-202004-20 ========================================== Severity: High Date : 2020-04-22 CVE-ID : CVE-2020-6458 CVE-2020-6459 CVE-2020-6460 Package : chromium Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1140 Summary ======= The packa...

8.8CVSS1.5AI score0.01326EPSS
SaveExploits1References8
ArchLinux
ArchLinux
•added 2020/04/17 12:00 a.m.•48 views

[ASA-202004-16] openvpn: denial of service

Arch Linux Security Advisory ASA-202004-16 ========================================== Severity: Medium Date : 2020-04-17 CVE-ID : CVE-2020-11810 Package : openvpn Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1135 Summary ======= The package openvpn before versio...

4.3CVSS2AI score0.01609EPSS
SaveExploits1References4
ArchLinux
ArchLinux
•added 2019/08/10 12:00 a.m.•48 views

[ASA-201908-8] postgresql: multiple issues

Arch Linux Security Advisory ASA-201908-8 ========================================= Severity: Medium Date : 2019-08-10 CVE-ID : CVE-2019-10208 CVE-2019-10209 Package : postgresql Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1019 Summary ======= The package...

8.8CVSS1.5AI score0.0217EPSS
SaveExploits0References6
ArchLinux
ArchLinux
•added 2019/03/03 12:00 a.m.•48 views

[ASA-201903-6] lib32-openssl-1.0: information disclosure

Arch Linux Security Advisory ASA-201903-6 ========================================= Severity: Medium Date : 2019-03-03 CVE-ID : CVE-2019-1559 Package : lib32-openssl-1.0 Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-918 Summary ======= The package...

5.9CVSS0.8AI score0.17139EPSS
SaveExploits0References3
ArchLinux
ArchLinux
•added 2019/03/03 12:00 a.m.•48 views

[ASA-201903-5] file: multiple issues

Arch Linux Security Advisory ASA-201903-5 ========================================= Severity: High Date : 2019-03-03 CVE-ID : CVE-2019-8904 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 Package : file Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-907 Summary ======= Th...

8.8CVSS1.9AI score0.03465EPSS
SaveExploits4References10
ArchLinux
ArchLinux
•added 2019/02/17 12:00 a.m.•48 views

[ASA-201902-20] flatpak: privilege escalation

Arch Linux Security Advisory ASA-201902-20 ========================================== Severity: High Date : 2019-02-17 CVE-ID : CVE-2019-5736 Package : flatpak Type : privilege escalation Remote : Yes Link : https://security.archlinux.org/AVG-880 Summary ======= The package flatpak before version...

9.3CVSS2.5AI score0.98452EPSS
SaveExploits34References5
ArchLinux
ArchLinux
•added 2018/12/08 12:00 a.m.•48 views

[ASA-201812-3] wireshark-cli: multiple issues

Arch Linux Security Advisory ASA-201812-3 ========================================= Severity: Critical Date : 2018-12-08 CVE-ID : CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 Package : wireshark-cli Type : multiple issues Remote : Yes Li...

7.5CVSS1AI score0.17697EPSS
SaveExploits8References30
ArchLinux
ArchLinux
•added 2018/10/12 12:00 a.m.•48 views

[ASA-201810-9] wireshark-cli: multiple issues

Arch Linux Security Advisory ASA-201810-9 ========================================= Severity: High Date : 2018-10-12 CVE-ID : CVE-2018-12086 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 Package : wireshark-cli Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-779 Summa...

7.8CVSS1.1AI score0.11591EPSS
SaveExploits0References18
ArchLinux
ArchLinux
•added 2017/12/07 12:00 a.m.•48 views

[ASA-201712-5] chromium: multiple issues

Arch Linux Security Advisory ASA-201712-5 ========================================= Severity: Critical Date : 2017-12-07 CVE-ID : CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418...

8.8CVSS0.8AI score0.02938EPSS
SaveExploits1References41
ArchLinux
ArchLinux
•added 2017/11/07 12:00 a.m.•48 views

[ASA-201711-14] openssl: multiple issues

Arch Linux Security Advisory ASA-201711-14 ========================================== Severity: Medium Date : 2017-11-07 CVE-ID : CVE-2017-3735 CVE-2017-3736 Package : openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-477 Summary ======= The package openssl...

6.5CVSS0.6AI score0.17699EPSS
SaveExploits0References9
ArchLinux
ArchLinux
•added 2017/09/13 12:00 a.m.•48 views

[ASA-201709-5] tcpdump: multiple issues

Arch Linux Security Advisory ASA-201709-5 ========================================= Severity: Critical Date : 2017-09-13 CVE-ID : CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900...

9.8CVSS1AI score0.06196EPSS
SaveExploits3References195
ArchLinux
ArchLinux
•added 2017/08/12 12:00 a.m.•48 views

[ASA-201708-7] mercurial: multiple issues

Arch Linux Security Advisory ASA-201708-7 ========================================= Severity: Critical Date : 2017-08-12 CVE-ID : CVE-2017-1000115 CVE-2017-1000116 Package : mercurial Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-378 Summary ======= The package...

10CVSS2.5AI score0.05734EPSS
SaveExploits1References4
ArchLinux
ArchLinux
•added 2017/06/06 12:00 a.m.•48 views

[ASA-201706-6] tomcat7: access restriction bypass

Arch Linux Security Advisory ASA-201706-6 ========================================= Severity: High Date : 2017-06-06 CVE-ID : CVE-2017-5664 Package : tomcat7 Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-290 Summary ======= The package tomcat7 before...

7.5CVSS0.16567EPSS
SaveExploits1References6
ArchLinux
ArchLinux
•added 2017/05/29 12:00 a.m.•48 views

[ASA-201705-21] lib32-nss: arbitrary code execution

Arch Linux Security Advisory ASA-201705-21 ========================================== Severity: Critical Date : 2017-05-29 CVE-ID : CVE-2017-5461 Package : lib32-nss Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-248 Summary ======= The package lib32-nss...

9.8CVSS2.1AI score0.04741EPSS
SaveExploits0References5
ArchLinux
ArchLinux
•added 2016/08/08 12:00 a.m.•48 views

curl: multiple issues

CVE-2016-5419 authentication bypass libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established...

7.5CVSS0.4AI score0.15893EPSS
SaveExploits0References6
ArchLinux
ArchLinux
•added 2016/07/10 12:00 a.m.•48 views

thunderbird: arbitrary code execution

CVE-2016-2815 arbitrary code execution Mozilla developers and community members reported several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with...

6.8CVSS3.6AI score0.03873EPSS
SaveExploits0References3
ArchLinux
ArchLinux
•added 2016/06/19 12:00 a.m.•48 views

lib32-glibc: denial of service

clntudpcall allocates a buffer, using alloca, to store the payload of an incoming socket error. If a malicious server floods the client with crafted ICMP and UDP packets, this can cause the client to allocate sufficiently many such temporary buffers to cause a stack frame overflow denial of...

7.5CVSS2.8AI score0.03922EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/06/10 12:00 a.m.•48 views

lib32-gnutls: arbitrary file overwrite

Setuid programs using GnuTLS could potentially allow an attacker to overwrite and corrupt arbitrary files in the filesystem. This issue was introduced in GnuTLS 3.4.12 with the GNUTLSKEYLOGFILE environment variable handling via getenv and fixed in GnuTLS 3.4.13 by switching to securegetenv where...

7.7AI score0.022EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/03/20 12:00 a.m.•48 views

thunderbird: multiple issues

CVE-2016-1952 CVE-2016-1953 arbitrary code execution: Mozilla developers fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough...

9.3CVSS1AI score0.30946EPSS
SaveExploits9References33
ArchLinux
ArchLinux
•added 2016/02/28 12:00 a.m.•48 views

cacti: sql injection

CVE-2015-8604 sql injection SQL injection in graphsnew.php. - CVE-2015-8377 sql injection SQL injection vulnerability in the hostnewgraphssave function in graphsnew.php. - CVE-2015-8369 sql injection SQL injection in graph.php...

7.5CVSS2.1AI score0.02319EPSS
SaveExploits7References3
ArchLinux
ArchLinux
•added 2016/02/13 12:00 a.m.•48 views

firefox: same-origin policy bypass

Jason Pang of OneSignal reported that service workers intercept responses to plugin network requests made through the browser. Plugins which make security decisions based on the content of network requests can have these decisions subverted if a service worker forges responses to those requests...

6.8CVSS8.5AI score0.01503EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/02/02 12:00 a.m.•48 views

python2-django: permission bypass

If a ModelAdmin uses saveas=True not the default, the admin provides an option when editing objects to "Save as new". A regression in Django 1.9 prevented that form submission from raising a "Permission Denied" error for users without the "add" permission...

6CVSS3.6AI score0.01535EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/01/25 12:00 a.m.•48 views

privoxy: denial of service

CVE-2016-1982 denial of service A vulnerability was discovered in a way the privoxy deals with corrupted chunk-encoded content. A maliciously crafted input can result in a remote denial of service. - CVE-2016-1983 denial of service A vulnerability was found in a way the privoxy processes specific...

5CVSS2.9AI score0.02867EPSS
SaveExploits0References3
ArchLinux
ArchLinux
•added 2016/01/14 12:00 a.m.•48 views

openssh: multiple issues

CVE-2016-0777 information disclosure An information leak flaw was found in the way the OpenSSH client roaming feature was implemented. A malicious server could potentially use this flaw to leak portions of memory possibly including private SSH keys of a successfully authenticated OpenSSH client...

6.5CVSS2.4AI score0.63468EPSS
SaveExploits3References3
ArchLinux
ArchLinux
•added 2015/12/09 12:00 a.m.•48 views

chromium: multiple issues

CVE-2015-6788 arbitrary code execution A type confusion vulnerability has been discovered in the handling of extensions that could possibly lead to arbitrary code execution. - CVE-2015-6789 arbitrary code execution A use-after free vulnerability has been discovered in Blink that could possibly...

10CVSS3.2AI score0.03058EPSS
SaveExploits0References5
ArchLinux
ArchLinux
•added 2015/10/14 12:00 a.m.•48 views

chromium: multiple issues

CVE-2015-6755 cross-origin bypass: Cross-origin bypass in Blink. Credit to Mariusz Mlynski. - CVE-2015-6756 use-after-free: Use-after-free in PDFium. - CVE-2015-6757 use-after-free: Use-after-free in ServiceWorker. Credit to Collin Payne. - CVE-2015-6758: Bad-cast in PDFium. Credit to Atte...

7.5CVSS2.1AI score0.06974EPSS
SaveExploits3References10
ArchLinux
ArchLinux
•added 2015/09/21 12:00 a.m.•48 views

wordpress: multiple issues

CVE-2015-5714 cross-side scripting A cross-site scripting vulnerability has been discovered when processing shortcode tags. - CVE-2015-5715 permission bypass It has been discovered that users without proper permissions could publish private posts and make them sticky...

1.7AI score0.06937EPSS
SaveExploits2References4
ArchLinux
ArchLinux
•added 2015/08/07 12:00 a.m.•48 views

wordpress: multiple issues

CVE-2015-2213: SQL injection in comments ID. - CVE-2015-5730: Timing attack in widgets. - CVE-2015-5731: Denial of service by locking a post from being edited. - CVE-2015-5732, CVE-2015-5733 CVE-2015-5734: XSS...

7.5CVSS2.8AI score0.09333EPSS
SaveExploits0References8
ArchLinux
ArchLinux
•added 2015/05/08 12:00 a.m.•48 views

mariadb-clients: denial of service

A heap-based buffer overflow was found in the way PCRE handled certain malformed regular expressions. This issue could cause a crash while parsing malicious regular expressions related to an assertion that allows zero repeats...

5CVSS3.7AI score0.06505EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2015/04/29 12:00 a.m.•48 views

dovecot: denial of service

Dovecot = 2.2.14 does not correctly handle SSL/TLS handshake failure in the login process, asking OpenSSL to flush a connection that has already been aborted. This results in a crash with some versions of OpenSSL most likely = 1.0.2. A patch to OpenSSL has also been written to handle more...

4.3CVSS6AI score0.02842EPSS
SaveExploits0References5
ArchLinux
ArchLinux
•added 2015/04/17 12:00 a.m.•48 views

flashplugin: multiple issues

CVE-2015-0346 arbitrary code execution A double-free vulnerability allows attackers to execute arbitrary code via unspecified vectors. - CVE-2015-0347 arbitrary code execution Memory corruption vulnerability that could lead to arbitrary code execution or cause a denial of service via unspecified...

10CVSS6.2AI score0.92109EPSS
SaveExploits13References23
ArchLinux
ArchLinux
•added 2015/03/23 12:00 a.m.•48 views

cpio: directory traversal

It was reported that cpio is vulnerable to a directory traversal vulnerability when using the --no-absolute-filenames option. While extracting an archive, it will extract symlinks and then follow them if they are referenced in further entries. This can be exploited by a rogue archive to write to...

1.9CVSS3.9AI score0.02906EPSS
SaveExploits4References3
ArchLinux
ArchLinux
•added 2015/02/17 12:00 a.m.•48 views

krb5: multiple issues

CVE-2014-5352 authenticated remote code execution: In the MIT krb5 libgssapikrb5 library, after gssprocesscontexttoken is used to process a valid context deletion token, the caller is left with a security context handle containing a dangling pointer. Further uses of this handle will result in...

9CVSS1.7AI score0.06213EPSS
SaveExploits0References8
ArchLinux
ArchLinux
•added 2015/01/20 12:00 a.m.•48 views

polarssl: remote code execution

During the parsing of a ASN.1 sequence, a pointer in the linked list of asn1sequence is not initialized by asn1getsequenceof. In case an error occurs during parsing of the list, a situation is created where the uninitialized pointer is passed to polarsslfree. This sequence can be triggered when a...

7.5CVSS5.5AI score0.03246EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2014/12/15 12:00 a.m.•48 views

docker: multiple issues

CVE-2014-9356 path traversal Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both...

10CVSS3.5AI score0.06202EPSS
SaveExploits0References4
ArchLinux
ArchLinux
•added 2014/12/12 12:00 a.m.•48 views

xorg-server: multiple issues

CVE-2014-8091 denial of service X.Org X Window System, when using SUN-DES-1 Secure RPC authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a crafted connection...

6.5CVSS6.2AI score0.05192EPSS
SaveExploits0References15
ArchLinux
ArchLinux
•added 2014/12/01 12:00 a.m.•48 views

gnupg: denial of service

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow. The bug is not easy to exploit because there only 80 possible values which can be used to overwrite memory. However, a denial of service is possible and someone may come up with other...

5CVSS0.9AI score0.05167EPSS
SaveExploits0References4
ArchLinux
ArchLinux
•added 2014/11/28 12:00 a.m.•48 views

libjpeg-turbo: denial of service

Special crafted jpeg files lead to stack smashing and lead to at least a dos maybe remote due to imagick. The Huffman encoder's local buffer can be overrun when a buffered destination manager is being used and an extremely-high-frequency block basically junk image data is being encoded. Even thou...

0.5AI score0.03235EPSS
SaveExploits0References4
ArchLinux
ArchLinux
•added 2014/11/20 12:00 a.m.•48 views

chromium: multiple issues

CVE-2014-7899 address bar spoofing A flaw allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string. - CVE-2014-7900 use-after-free Use-after-free vulnerability in the...

7.5CVSS5.5AI score0.07653EPSS
SaveExploits14References12
ArchLinux
ArchLinux
•added 2014/11/19 12:00 a.m.•48 views

arm-none-eabi-binutils: multiple issues

CVE-2014-8484 invalid read Invalid read flaw leads to denial of service while parsing specially crafted files in programs using libbfd. - CVE-2014-8485 out-of-bounds write Lack of range checking leading to controlled write in bfdelfsetupsections which results in denial of service or possible code...

7.5CVSS4.6AI score0.07486EPSS
SaveExploits7References11
ArchLinux
ArchLinux
•added 2014/11/17 12:00 a.m.•48 views

ruby: denial of service

CPU exhaustion can occur as a result of recursive expansion with an empty string. When reading text nodes from an XML document, the REXML parser can be coerced into allocating extremely large string objects which can consume all of the memory on a machine, causing a denial of service...

5CVSS3.3AI score0.056EPSS
SaveExploits1References2
ArchLinux
ArchLinux
•added 2025/03/26 12:00 a.m.•47 views

[ASA-202503-1] exim: privilege escalation

Arch Linux Security Advisory ASA-202503-1 ========================================= Severity: High Date : 2025-03-26 CVE-ID : CVE-2025-30232 Package : exim Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2859 Summary ======= The package exim before version 4.98.2...

8.1CVSS7.7AI score0.00524EPSS
SaveExploits0References5
ArchLinux
ArchLinux
•added 2021/12/11 12:00 a.m.•47 views

[ASA-202112-6] chromium: multiple issues

Arch Linux Security Advisory ASA-202112-6 ========================================= Severity: High Date : 2021-12-11 CVE-ID : CVE-2021-4052 CVE-2021-4053 CVE-2021-4054 CVE-2021-4055 CVE-2021-4056 CVE-2021-4057 CVE-2021-4058 CVE-2021-4059 CVE-2021-4061 CVE-2021-4062 CVE-2021-4063 CVE-2021-4064...

8.8CVSS1.6AI score0.02073EPSS
SaveExploits0References34
ArchLinux
ArchLinux
•added 2020/09/14 12:00 a.m.•47 views

[ASA-202009-7] netbeans: arbitrary code execution

Arch Linux Security Advisory ASA-202009-7 ========================================= Severity: Critical Date : 2020-09-14 CVE-ID : CVE-2020-11986 Package : netbeans Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1221 Summary ======= The package netbeans befo...

9.8CVSS2.1AI score0.09931EPSS
SaveExploits0References3
ArchLinux
ArchLinux
•added 2020/05/06 12:00 a.m.•47 views

[ASA-202005-2] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-202005-2 ========================================= Severity: High Date : 2020-05-06 CVE-ID : CVE-2020-6464 CVE-2020-6831 Package : chromium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1149 Summary ======= The package...

9.8CVSS1.5AI score0.05803EPSS
SaveExploits1References8
ArchLinux
ArchLinux
•added 2020/04/13 12:00 a.m.•47 views

[ASA-202004-12] thunderbird: multiple issues

Arch Linux Security Advisory ASA-202004-12 ========================================== Severity: Critical Date : 2020-04-13 CVE-ID : CVE-2020-6815 CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 Package : thunderbird Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1132...

9.8CVSS0.7AI score0.06305EPSS
SaveExploits1References14
ArchLinux
ArchLinux
•added 2020/03/11 12:00 a.m.•47 views

[ASA-202003-8] firefox: multiple issues

Arch Linux Security Advisory ASA-202003-8 ========================================= Severity: Critical Date : 2020-03-11 CVE-ID : CVE-2019-20503 CVE-2020-6805 CVE-2020-6806 CVE-2020-6807 CVE-2020-6808 CVE-2020-6809 CVE-2020-6810 CVE-2020-6811 CVE-2020-6812 CVE-2020-6813 CVE-2020-6814 CVE-2020-681...

9.8CVSS0.3AI score0.03271EPSS
SaveExploits2References38
Total number of security vulnerabilities1854