Lucene search
+L
GentooMost viewed

3831 matches found

Gentoo Linux
Gentoo Linux
added 2023/12/22 12:0 a.m.48 views

Arduino: Remote Code Execution

Background Arduino is an open-source AVR electronics prototyping platform. Description A vulnerability has been discovered in Arduino. Please review the CVE identifier referenced below for details. Impact Arduino bundles a vulnerable version of log4j that may lead to remote code execution...

7.5CVSS8.1AI score0.81147EPSS
SaveExploits9
Gentoo Linux
Gentoo Linux
added 2023/11/24 12:0 a.m.48 views

SQLite: Multiple Vulnerabilities

Background SQLite is a C library that implements an SQL database engine. Description Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no kno...

7.5CVSS7.9AI score0.0216EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2023/05/03 12:0 a.m.48 views

libsdl: Multiple Vulnerabilities

Background Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio, keyboard, mouse, joystick, and graphics hardware via OpenGL and Direct3D. Description Multiple vulnerabilities have been discovered in SDL. Please review the CVE identifiers...

8.8CVSS7.2AI score0.03699EPSS
SaveExploits12
Gentoo Linux
Gentoo Linux
added 2022/12/19 12:0 a.m.48 views

Mozilla Network Security Service (NSS): Multiple Vulnerabilities

Background The Mozilla Network Security Service is a library implementing security features like SSL v.2/v.3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME and X.509 certificates. Description Multiple vulnerabilities have been discovered in Mozilla Network Security Service NSS. Please review the...

9.8CVSS2.7AI score0.17563EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2022/11/22 12:0 a.m.49 views

xterm: Arbitrary Code Execution

Background xterm is a terminal emulator for the X Window system. Description xterm does not correctly handle control characters related to OSC 50 font ops sequence handling. Impact The vulnerability allows text written to the terminal to write text to the terminal's command line. If the terminal'...

9.8CVSS3.3AI score0.04949EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2022/10/31 12:0 a.m.48 views

Sofia-SIP: Multiple Vulnerabilities

Background Sofia-SIP is an RFC3261 compliant SIP User-Agent library. Description Multiple vulnerabilities have been discovered in Sofia-SIP. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no know...

9.8CVSS3.1AI score0.03848EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2022/10/31 12:0 a.m.48 views

libxml2: Multiple Vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the GNOME project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround The...

7.8CVSS2.5AI score0.22791EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2022/10/31 12:0 a.m.48 views

OpenEXR: Multiple Vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact Please revi...

8.8CVSS7.5AI score0.02291EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2022/09/29 12:0 a.m.48 views

Poppler: Arbitrary Code Execution

Background Poppler is a PDF rendering library based on the xpdf-3.0 code base. Description Multiple vulnerabilities have been discovered in Poppler. Please review the CVE identifiers referenced below for details. Impact Processing a specially crafted PDF file or JBIG2 image could lead to a crash ...

7.8CVSS8.4AI score0.75994EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2022/09/25 12:0 a.m.48 views

Smokeping: Multiple vulnerabilities

Background Smokeping is a powerful latency measurement tool Description Multiple vulnerabilities have been discovered in Smokeping. Please review the CVE identifiers referenced below for details. Impact A local attacker which gains access to the smokeping user could gain root privileges. Workarou...

6.5CVSS3.9AI score0.00887EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2022/09/25 12:0 a.m.48 views

GRUB: Multiple Vulnerabilities

Background GNU GRUB is a multiboot boot loader used by most Linux systems. Description Multiple vulnerabilities have been discovered in GRUB. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no kno...

8.1CVSS7.1AI score0.01284EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2022/08/04 12:0 a.m.48 views

3MF Consortium lib3mf: Remote code execution

Background lib3mf is an implementation of the 3D Manufacturing Format file standard. Description Incorrect memory handling within lib3mf could result in a use-after-free. Impact An attacker that can provide malicious input to an application using 3MF Consortium's lib3mf could achieve remote code...

8.1CVSS3.9AI score0.0417EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2021/05/26 12:0 a.m.48 views

Tcpreplay: Multiple vulnerabilities

Background Tcpreplay is a suite of utilities for UNIX systems for editing and replaying network traffic which was previously captured by tools like tcpdump and ethereal/wireshark. Description Multiple vulnerabilities have been discovered in Tcpreplay. Please review the CVE identifiers referenced...

7.5CVSS2.5AI score0.02562EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2021/04/30 12:0 a.m.48 views

libTIFF: Multiple vulnerabilities

Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description Multiple vulnerabilities have been discovered in LibTIFF. Please review the referenced...

7.8CVSS8.3AI score0.01922EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2021/01/22 12:0 a.m.48 views

Dnsmasq: Multiple vulnerabilities

Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Multiple vulnerabilities have been discovered in Dnsmasq. Please review the references below for details. Impact An attacker, by sending specially crafted DNS replies, could possibly execute...

8.3CVSS3.1AI score0.86692EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2020/12/07 12:0 a.m.48 views

SeaMonkey: Multiple vulnerabilities

Background The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as “Mozilla Application Suite”. Description Multiple vulnerabilities have been discovered in SeaMonkey. Please review referenced release notes for more...

7.7AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2020/11/11 12:0 a.m.48 views

Mozilla Firefox: Remote code execution

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Invalid assumptions when emitting the the MCallGetProperty opcode in the JavaScript JIT may result in a use-after-free condition. Impact A remote attacker could possibly execute arbitrary code wi...

9.3CVSS3.3AI score0.42327EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
added 2020/09/29 12:0 a.m.48 views

libuv: Buffer overflow

Background libuv is a multi-platform support library with a focus on asynchronous I/O. Description libuv used an incorrect buffer size for paths, causing a buffer overflow. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of...

7.8CVSS4.5AI score0.00714EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2020/06/15 12:0 a.m.48 views

Cyrus IMAP Server: Access restriction bypass

Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description An issue was discovered in Cyrus IMAP Server where sieve script uploading is excessively trusted. Impact A user can use a sieve script to create any mailbox with administrator privileges. Workaround...

6.5CVSS2.3AI score0.01655EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2020/05/14 12:0 a.m.48 views

Python: Denial of service

Background Python is an interpreted, interactive, object-oriented programming language. Description An issue was discovered in urllib.request.AbstractBasicAuthHandler which allowed a remote attacker to send malicious data causing extensive regular expression backtracking. Impact An attacker could...

7.1CVSS7.3AI score0.06617EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2017/02/20 12:0 a.m.48 views

Mozilla Firefox: Multiple vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla Project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code wi...

9.8CVSS9.5AI score0.33534EPSS
SaveExploits16
Gentoo Linux
Gentoo Linux
added 2017/02/20 12:0 a.m.48 views

Mozilla Thunderbird: Multiple vulnerabilities

Background Mozilla Thunderbird is a popular open-source email client from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing a user to open a...

9.8CVSS9.5AI score0.33534EPSS
SaveExploits15
Gentoo Linux
Gentoo Linux
added 2017/01/31 12:0 a.m.48 views

Ansible: Remote execution of arbitrary code

Background Ansible is a radically simple IT automation platform. Description An input validation vulnerability was found in Ansible’s handling of data sent from client systems. Impact An attacker with control over a client system being managed by Ansible and the ability to send facts back to the...

9.3CVSS7.7AI score0.17789EPSS
SaveExploits5
Gentoo Linux
Gentoo Linux
added 2017/01/25 12:0 a.m.48 views

X.Org X Server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details. Impact An authenticated attacker could possibly cause a Denia...

7.5CVSS7.9AI score0.02879EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2017/01/01 12:0 a.m.48 views

Bash: Multiple vulnerabilities

Background Bash is the standard GNU Bourne Again SHell. Description Multiple vulnerabilities have been discovered in Bash. Please review the CVE identifiers referenced below for details. Impact A local attacker could possibly execute arbitrary code with the privileges of the process, or cause a...

8.4CVSS3.4AI score0.00576EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2016/12/06 12:0 a.m.48 views

util-linux: Arbitrary code execution

Background util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems. Description A command injection flaw was discovered in util-linux’s “blkid” utility. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the...

7.8CVSS6.6AI score0.00642EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2016/12/02 12:0 a.m.48 views

GnuPG: RNG output is predictable

Background The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software. Description A long standing bug since 1998 in Libgcrypt see “GLSA 201610-04” below and GnuPG allows an attacker to predict the output from the standard RNG. Please review the “Entropy Loss...

5.3CVSS6AI score0.03597EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2016/12/02 12:0 a.m.48 views

DavFS2: Local privilege escalation

Background DavFS2 is a file system driver that allows you to mount a WebDAV server as a local disk drive. Description DavFS2 installs “/usr/sbin/mount.davfs” as setuid root. This utility uses “system” to call “/sbin/modprobe”. While the call to “modprobe” itself cannot be manipulated, a local...

7.2CVSS6.1AI score0.01168EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2016/11/01 12:0 a.m.48 views

OpenVPN: Multiple vulnerabilities

Background OpenVPN is a multi-platform, full-featured SSL VPN solution. Description Multiple vulnerabilities have been discovered in OpenVPN. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to recover plaintext from encrypted communications...

5.9CVSS3AI score0.0594EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2016/03/06 12:0 a.m.48 views

GIMP: Multiple vulnerabilities

Background GIMP is a cross-platform image editor available for GNU/Linux, OS X, Windows and more operating systems. Description GIMP’s network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally...

6.8CVSS8.2AI score0.04509EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2015/12/17 12:0 a.m.48 views

IPython: User-assisted execution of arbitrary code

Background IPython is an advanced interactive shell for Python. Description IPython does not properly check the MIME type of a file. Impact A remote attacker could entice a user to open a specially crafted text file using IPython, possibly resulting in execution of arbitrary JavaScript with the...

6.8CVSS6.6AI score0.02487EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2015/07/06 12:0 a.m.48 views

Tor: Denial of service

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Tor does not handle data correctly when specifically crafted data is sent, and also fails to properly verify a descriptor provided by a hidden service...

7.5CVSS7.3AI score0.01384EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/08/10 12:0 a.m.48 views

LibSSH: Information disclosure

Background LibSSH is a C library providing SSHv2 and SSHv1. Description A new connection inherits the state of the PRNG without re-seeding with random data. Impact Servers using ECC ECDSA or DSA certificates in non-deterministic mode may under certain conditions leak their private key. Workaround...

1.9CVSS6.3AI score0.00356EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2014/05/17 12:0 a.m.48 views

Rack: Multiple vulnerabilities

Background Rack is a modular Ruby web server interface. Description Multiple vulnerabilities have been discovered in Rack. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a...

5.1CVSS7.7AI score0.05383EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/05/17 12:0 a.m.48 views

Ettercap: Multiple vulnerabilities

Background Ettercap is a suite of tools for content filtering, sniffing and man in the middle attacks on a LAN. Description Multiple vulnerabilities have been discovered in Ettercap: Ettercap does not handle temporary files securely CVE-2010-3843. A format string flaw in Ettercap could cause a...

8.8CVSS8.8AI score0.01404EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2014/03/20 12:0 a.m.48 views

GNU Emacs: Multiple vulnerabilities

Background GNU Emacs is a highly extensible and customizable text editor. Description Multiple vulnerabilities have been discovered in GNU Emacs: When ‘global-ede-mode’ is enabled, EDE in Emacs automatically loads a Project.ede file from the project directory CVE-2012-0035. When...

9.3CVSS8.2AI score0.0379EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/01/21 12:0 a.m.48 views

Active Record: SQL injection

Background Active Record is a Ruby gem that allows database entries to be manipulated as objects. Description An Active Record method parameter can mistakenly be used as a scope. Impact A remote attacker could use specially crafted input to execute arbitrary SQL statements. Workaround The...

7.5CVSS7.4AI score0.04458EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2013/12/16 12:0 a.m.48 views

Wireshark: Multiple vulnerabilities

Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process ...

5CVSS7.3AI score0.0284EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2013/12/03 12:0 a.m.48 views

BusyBox: Multiple vulnerabilities

Background BusyBox is set of tools for embedded systems and is a replacement for GNU Coreutils. Description Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a specially crafted DHCP reques...

7.5CVSS9.5AI score0.05757EPSS
SaveExploits5
Gentoo Linux
Gentoo Linux
added 2013/11/22 12:0 a.m.48 views

QtCore, QtGui: Multiple vulnerabilities

Background The Qt toolkit is a comprehensive C++ application development framework. Description Multiple vulnerabilities have been discovered in QtCore and QtGui. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially craft...

9.3CVSS7.3AI score0.07543EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2013/09/23 12:0 a.m.48 views

Subversion: Multiple vulnerabilities

Background Subversion is a versioning system designed to be a replacement for CVS. Description Multiple vulnerabilities have been discovered in Subversion. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a Denial of Service condition or obtain...

7.8CVSS7AI score0.51442EPSS
SaveExploits11
Gentoo Linux
Gentoo Linux
added 2013/01/08 12:0 a.m.48 views

HAProxy: Arbitrary code execution

Background HAProxy is a TCP/HTTP reverse proxy for high availability environments. Description A boundary error in HAProxy could cause a buffer overflow when header rewriting is enabled and the configuration sets global.tune.bufsize to a value greater than the default 16384 bytes. Impact A remote...

5.1CVSS7.6AI score0.05413EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2009/01/11 12:0 a.m.48 views

pdnsd: Denial of Service and cache poisoning

Background pdnsd is a proxy DNS server with permanent caching that is designed to cope with unreachable DNS servers. Description Two issues have been reported in pdnsd: The pexecquery function in src/dnsquery.c does not properly handle many entries in the answer section of a DNS reply, related to...

6.8CVSS7.2AI score0.95182EPSS
SaveExploits21
Gentoo Linux
Gentoo Linux
added 2007/11/14 12:0 a.m.48 views

TikiWiki: Multiple vulnerabilities

Background TikiWiki is an open source content management system written in PHP. Description Stefan Esser reported that a previous vulnerability CVE-2007-5423, GLSA 200710-21 was not properly fixed in TikiWiki 1.9.8.1 CVE-2007-5682. The TikiWiki development team also added several checks to avoid...

7.5CVSS7AI score0.76661EPSS
SaveExploits7
Gentoo Linux
Gentoo Linux
added 2007/11/14 12:0 a.m.48 views

Cpio: Buffer overflow

Background GNU cpio copies files into or out of a cpio or tar archive. Description A buffer overflow vulnerability in the safernamesuffix function in GNU cpio has been discovered. Impact A remote attacker could entice a user to open a specially crafted archive file resulting in a stack-based buff...

7.5CVSS8.1AI score0.14902EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2007/09/27 12:0 a.m.48 views

teTeX: Multiple buffer overflows

Background teTeX is a complete TeX distribution for editing documents. Description Mark Richters discovered a buffer overflow in the opensty function in file mkind.c. Other vulnerabilities have also been discovered in the same file but might not be exploitable CVE-2007-0650. Tetex also includes...

6.8CVSS7.9AI score0.08565EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/08/16 12:0 a.m.48 views

MySQL: Denial of Service and information leakage

Background MySQL is a popular multi-threaded, multi-user SQL server. Description Dormando reported a vulnerability within the handling of password packets in the connection protocol CVE-2007-3780. Andrei Elkin also found that the "CREATE TABLE LIKE" command didn't require SELECT privileges on the...

5CVSS6.8AI score0.14051EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/08/08 12:0 a.m.48 views

libarchive (formerly named as bsdtar): Multiple PaX Extension Header Vulnerabilities

Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description CPNI, CERT-FI, Tim Kientzle, and Colin Percival reported a buffer overflow CVE-2007-3641, an infinite loop...

9.3CVSS7.3AI score0.07432EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/07/28 12:0 a.m.48 views

VLC media player: Format string vulnerabilities

Background VLC media player is a multimedia player for various audio and video formats. Description David Thiel from iSEC Partners Inc. discovered format string errors in various plugins when parsing data. The affected plugins include Vorbis, Theora, CDDA and SAP. Impact A remote attacker could...

9.3CVSS7AI score0.17079EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/05/17 12:0 a.m.48 views

PhpWiki: Remote execution of arbitrary code

Background PhpWiki is an open source content management system written in PHP. Description Harold Hallikainen has reported that the Upload page fails to properly check the extension of a file. Impact A remote attacker could upload a specially crafted PHP file to the vulnerable server, resulting i...

7.5CVSS6.9AI score0.03279EPSS
SaveExploits0
Total number of security vulnerabilities3831