Lucene search
+L
GentooMost viewed

3831 matches found

Gentoo Linux
Gentoo Linux
•added 2007/10/07 12:0 a.m.•32 views

QGit: Insecure temporary file creation

Background QGit is a graphical interface to git repositories that allows you to browse revisions history, view patch content and changed files. Description Raphael Marichez discovered that the DataLoader::doStart method creates temporary files in an insecure manner and executes them. Impact A loc...

6.9CVSS6.7AI score0.00448EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2007/07/03 12:0 a.m.•32 views

GNU C Library: Integer overflow

Background The GNU C library is the standard C library used by Gentoo Linux systems. It provides programs with basic facilities and interfaces to system calls. ld.so is the dynamic linker which prepares dynamically linked programs for execution by resolving runtime dependencies and related...

7.2CVSS7AI score0.00454EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2007/05/07 12:0 a.m.•32 views

GIMP: Buffer overflow

Background GIMP is the GNU Image Manipulation Program. Description Marsu discovered that the "setcolortable" function in the SUNRAS plugin is vulnerable to a stack-based buffer overflow. Impact An attacker could entice a user to open a specially crafted .RAS file, possibly leading to the executio...

6.8CVSS7.1AI score0.15674EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
•added 2007/04/06 12:0 a.m.•32 views

Evince: Stack overflow in included gv code

Background Evince is a document viewer for multiple document formats, including PostScript. Description Evince includes code from GNU gv that does not properly boundary check user-supplied data before copying it into process buffers. Impact An attacker could entice a user to open a specially...

5.1CVSS7.2AI score0.15211EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
•added 2007/04/03 12:0 a.m.•32 views

zziplib: Buffer Overflow

Background The zziplib library is a lightweight library for extracting data from files archived in a single zip file. Description dmcox dmcox discovered a boundary error in the zzipopensharedio function from zzip/file.c . Impact A remote attacker could entice a user to run a zziplib function with...

9.3CVSS7.1AI score0.06553EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2007/01/24 12:0 a.m.•32 views

MIT Kerberos 5: Arbitrary Remote Code Execution

Background MIT Kerberos 5 is a suite of applications that implement the Kerberos network protocol. Description The Kerberos administration daemon, and possibly other applications using the GSS-API or RPC libraries, could potentially call a function pointer in a freed heap buffer, or attempt to fr...

9.3CVSS7.4AI score0.07919EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2006/12/10 12:0 a.m.•32 views

ModPlug: Multiple buffer overflows

Background ModPlug is a library for playing MOD-like music. Description Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the "CSoundFile::ReadSample" function in sndfile.cpp. Impact A remote attacker can entice a user to read crafted modules or ITP files,...

5.1CVSS7.3AI score0.08835EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2006/11/27 12:0 a.m.•32 views

Kile: Incorrect backup file permission

Background Kile is a TeX/LaTeX editor for KDE. Description Kile fails to set the same permissions on backup files as on the original file. This is similar to CVE-2005-1920. Impact A kile user may inadvertently grant access to sensitive information. Workaround There is no known workaround at this...

7.5CVSS6.3AI score0.0367EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2006/11/21 12:0 a.m.•32 views

qmailAdmin: Buffer overflow

Background qmailAdmin is a free software package that provides a web interface for managing a qmail system with virtual domains. Description qmailAdmin fails to properly handle the "PATHINFO" variable in qmailadmin.c. The PATHINFO is a standard CGI environment variable filled with user supplied...

7.5CVSS7AI score0.04499EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2006/11/20 12:0 a.m.•32 views

Ruby: Denial of Service vulnerability

Background Ruby is a dynamic, open source programming language with a focus on simplicity and productivity. Description Zed Shaw, Jeremy Kemper, and Jamis Buck of the Mongrel project reported that the CGI library shipped with Ruby is vulnerable to a remote Denial of Service by an unauthenticated...

5CVSS6.6AI score0.04178EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2006/09/28 12:0 a.m.•32 views

DokuWiki: Shell command injection and Denial of service

Background DokuWiki is a wiki targeted at developer teams, workgroups and small companies. It does not use a database backend. Description Input validation flaws have been discovered in the image handling of fetch.php if ImageMagick is used, which is not the default method. Impact A remote attack...

7.5CVSS7.2AI score0.02162EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
•added 2006/09/28 12:0 a.m.•32 views

Mozilla Firefox: Multiple vulnerabilities

Background Mozilla Firefox is a redesign of the Mozilla Navigator component. The goal is to produce a cross-platform, stand-alone browser application. Description A number of vulnerabilities were found and fixed in Mozilla Firefox. For details please consult the references below. Impact The most...

10CVSS6.8AI score0.14915EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
•added 2006/08/08 12:0 a.m.•32 views

ClamAV: Heap buffer overflow

Background ClamAV is a GPL virus scanner. Description Damian Put has discovered a boundary error in the pefromupx function used by the UPX extraction module, which unpacks PE Windows executable files. Both the "clamscan" command-line utility and the "clamd" daemon are affected. Impact By sending ...

7.5CVSS7AI score0.19058EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
•added 2006/08/06 12:0 a.m.•32 views

pike: SQL injection vulnerability

Background Pike is a general purpose programming language, able to be used for multiple tasks. Description Some input is not properly sanitised before being used in a SQL statement in the underlying PostgreSQL database. Impact A remote attacker could provide malicious input to a pike program, whi...

7.5CVSS7.1AI score0.01729EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2006/06/26 12:0 a.m.•32 views

EnergyMech: Denial of service

Background EnergyMech is an IRC bot programmed in C. Description A bug in EnergyMech fails to handle empty CTCP NOTICEs correctly, and will cause a crash from a segmentation fault. Impact By sending an empty CTCP NOTICE, a remote attacker could exploit this vulnerability to cause a Denial of...

5CVSS6.3AI score0.01814EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2006/06/11 12:0 a.m.•32 views

SpamAssassin: Execution of arbitrary code

Background SpamAssassin is an extensible email filter used to identify junk email. spamd is the daemonized version of SpamAssassin. Description When spamd is run with both the "--vpopmail" -v and "--paranoid" -P options, it is vulnerable to an unspecified issue. Impact With certain configuration...

5.1CVSS7AI score0.74703EPSS
SaveExploits12
Gentoo Linux
Gentoo Linux
•added 2006/02/06 12:0 a.m.•32 views

ADOdb: PostgresSQL command injection

Background ADOdb is an abstraction library for PHP creating a common API for a wide range of database backends. Description Andy Staudacher discovered that ADOdb does not properly sanitize all parameters. Impact By sending specifically crafted requests to an application that uses ADOdb and a...

5CVSS7.4AI score0.0291EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/10/22 12:0 a.m.•32 views

cURL: NTLM username stack overflow

Background cURL is a command line tool and library for transferring files via many different protocols. It supports NTLM authentication to retrieve files from Windows-based systems. Description iDEFENSE reported that insufficient bounds checking on a memcpy of the supplied NTLM username can resul...

7.5CVSS7.2AI score0.05188EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/10/17 12:0 a.m.•32 views

Lynx: Buffer overflow in NNTP processing

Background Lynx is a text-mode browser for the World Wide Web. It supports multiple URL types, including HTTP and NNTP URLs. Description When accessing a NNTP URL, Lynx connects to a NNTP server and retrieves information about the available articles in the target newsgroup. Ulf Harnhammar...

9.8CVSS7.4AI score0.23257EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2005/10/06 12:0 a.m.•32 views

Ruby: Security bypass vulnerability

Background Ruby is an interpreted scripting language for quick and easy object-oriented programming. Ruby supports the safe execution of untrusted code using a safe level and taint flag mechanism. Description Dr. Yutaka Oiwa discovered that Ruby fails to properly enforce safe level protections...

7.5CVSS7.1AI score0.03256EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/08/02 12:0 a.m.•32 views

nbSMTP: Format string vulnerability

Background nbSMTP is an SMTP client suitable to run in chroot jails, in embedded systems, laptops and workstations. Description Niels Heinen discovered a format string vulnerability. Impact An attacker can setup a malicious SMTP server and exploit this vulnerability to execute arbitrary code with...

7.5CVSS7.3AI score0.09939EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2005/06/08 12:0 a.m.•32 views

SilverCity: Insecure file permissions

Background SilverCity provides lexical analysis for over 20 programming and markup languages. Description The SilverCity package installs three executable files with insecure permissions. Impact A local attacker could modify the executable files, causing arbitrary code to be executed with the...

7.8CVSS6.7AI score0.0034EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/06/01 12:0 a.m.•32 views

Binutils, elfutils: Buffer overflow

Background The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Elfutils provides a library and utilities to access, modify and analyse ELF objects. Description Tavis...

4.6CVSS7.1AI score0.006EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/04/20 12:0 a.m.•32 views

MPlayer: Two heap overflow vulnerabilities

Background MPlayer is a media player capable of handling multiple multimedia file formats. Description Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP MMST. Impact By setting up a malicious server and enticing a user to use its...

7.5CVSS7.3AI score0.0438EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/03/25 12:0 a.m.•32 views

IPsec-Tools: racoon Denial of service

Background IPsec-Tools is a port of KAME's implementation of the IPsec utilities. It contains a collection of network monitoring tools, including racoon, ping, and ping6. Description Sebastian Krahmer has reported a potential remote Denial of Service vulnerability in the ISAKMP header parsing cod...

5CVSS6.5AI score0.02433EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/03/12 12:0 a.m.•32 views

libexif: Buffer overflow vulnerability

Background libexif is a library for parsing, editing and saving EXIF data. Description libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause applications linked to libexif to cras...

2.6CVSS7.3AI score0.0446EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/02/03 12:0 a.m.•32 views

Newspost: Buffer overflow vulnerability

Background Newspost is a Usenet News binary autoposter. Description Niels Heinen has discovered a buffer overflow in the socketgetline function of Newspost, which can be triggered by providing long strings that do not end with a newline character. Impact A remote attacker could setup a malicious...

7.5CVSS7.4AI score0.15874EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
•added 2005/02/02 12:0 a.m.•32 views

enscript: Multiple vulnerabilities

Background enscript is a powerful ASCII to PostScript file converter. Description Erik Sjolund discovered several issues in enscript: it suffers from several buffer overflows CAN-2004-1186, quotes and shell escape characters are insufficiently sanitized in filenames CAN-2004-1185, and it supporte...

7.5CVSS2.6AI score0.04476EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2005/01/23 12:0 a.m.•32 views

MySQL: Insecure temporary file creation

Background MySQL is a fast, multi-threaded, multi-user SQL database server. Description Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the 'mysqlaccess' script creates temporary files in world-writeable directories with predictable names. Impact A local...

4.6CVSS6.5AI score0.00594EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/12/30 12:0 a.m.•32 views

PHProjekt: Remote code execution vulnerability

Background PHProjekt is a modular groupware web application used to coordinate group activities and share files. Description cYon discovered that the authform.inc.php script allows a remote user to define the global variable $pathpre. Impact A remote attacker can exploit this vulnerability to for...

4.1AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/11/08 12:0 a.m.•32 views

OpenSSL, Groff: Insecure tempfile handling

Background OpenSSL is a toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols as well as a general-purpose cryptography library. It includes the derchop script, which is used to convert DER-encoded certificates to PEM format. Groff GNU Troff is a typesetting package...

2.1CVSS6AI score0.00415EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/11/02 12:0 a.m.•32 views

Apache 1.3: Buffer overflow vulnerability in mod_include

Background The Apache HTTP server is one of the most popular web servers on the internet. modinclude is an Apache module to handle Server Side Includes SSI. Description A possible buffer overflow exists in the gettag function of modinclude.c. Impact If Server Side Includes SSI are enabled, a loca...

7.8CVSS7AI score0.0483EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
•added 2004/10/27 12:0 a.m.•32 views

PuTTY: Pre-authentication buffer overflow

Background PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. Description PuTTY fails to do proper bounds checking on SSH2MSGDEBUG packets. The "stringlen" parameter value is incorrectly checked due to signedness issues. Note that...

10CVSS7.2AI score0.07363EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/09/23 12:0 a.m.•32 views

getmail: Filesystem overwrite vulnerability

Background getmail is a reliable fetchmail replacement that supports Maildir, Mboxrd and external MDA delivery. Description David Watson discovered a vulnerability in getmail when it is configured to run as root and deliver mail to the maildirs/mbox files of untrusted local users. A malicious loc...

2.1CVSS6.4AI score0.00392EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/09/02 12:0 a.m.•32 views

Python 2.2: Buffer overflow in getaddrinfo()

Background Python is an interpreted, interactive, object-oriented, cross-platform programming language. Description If IPV6 is disabled in Python 2.2, getaddrinfo is not able to handle IPV6 DNS requests properly and a buffer overflow occurs. Impact An attacker can execute arbitrary code as the us...

7.5CVSS7.5AI score0.05084EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/08/12 12:0 a.m.•32 views

Nessus: "adduser" race condition vulnerability

Background Nessus is a free and powerful network security scanner. Description A race condition can occur in "nessus-adduser" if the user has not configured their TMPDIR variable. Impact A malicious user could exploit this bug to escalate privileges to the rights of the user running...

3.7CVSS1.7AI score0.00305EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/08/05 12:0 a.m.•32 views

Opera: Multiple new vulnerabilities

Background Opera is a multi-platform web browser. Description Multiple vulnerabilities have been found in the Opera web browser. Opera fails to deny write access to the "location" browser object. An attacker can overwrite methods in this object and gain script access to any page that uses one of...

5CVSS1.7AI score0.02989EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2004/05/27 12:0 a.m.•32 views

Heimdal: Kerberos 4 buffer overflow in kadmin

Background Heimdal is a free implementation of Kerberos. Description A buffer overflow was discovered in kadmind, a server for administrative access to the Kerberos database. Impact By sending a specially formatted message to kadmind, a remote attacker may be able to crash kadmind causing a denia...

10CVSS7.7AI score0.07159EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/05/25 12:0 a.m.•32 views

Insecure Temporary File Creation In MySQL

Background MySQL is a popular open-source multi-threaded, multi-user SQL database server. Description The MySQL bug reporting utility mysqlbug creates a temporary file to log bug reports to. A malicious local user with write access to the /tmp directory could create a symbolic link of the name...

2.1CVSS6.5AI score0.00604EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2003/12/08 12:0 a.m.•32 views

CVS: malformed module request vulnerability

Background CVS, which stands for Concurrent Versions System, is a client/server application which tracks changes to sets of files. It allows multiple users to work concurrently on files, and then merge their changes back into the main tree which can be on a remote system. It also allows branching...

7.5CVSS6.3AI score0.02294EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2025/05/14 12:0 a.m.•31 views

Spidermonkey: Multiple Vulnerabilities

Background SpiderMonkey is Mozilla’s JavaScript and WebAssembly Engine, used in Firefox, Servo and various other projects. It is written in C++, Rust and JavaScript. You can embed it into C++ and Rust projects, and it can be run as a stand-alone shell. Description Multiple vulnerabilities have be...

9.8CVSS7.6AI score0.00803EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2024/07/10 12:0 a.m.•31 views

Buildah: Multiple Vulnerabilities

Background Buildah is a tool that facilitates building Open Container Initiative OCI container images Description Please review the referenced CVE identifiers for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this time...

10CVSS7.3AI score0.02983EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2024/07/05 12:0 a.m.•31 views

PuTTY: Multiple Vulnerabilities

Background PuTTY is a free implementation of Telnet and SSH for Windows and Unix platforms, along with an xterm terminal emulator. Description Multiple vulnerabilities have been discovered in PuTTY. Please review the CVE identifiers referenced below for details. Impact Please review the reference...

5.9CVSS10AI score0.93305EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
•added 2024/05/08 12:0 a.m.•31 views

Epiphany: Buffer Overflow

Background Epiphany is a GNOME webbrowser based on the Mozilla rendering engine Gecko. Description A vulnerability has been discovered in Epiphany. Please review the CVE identifier referenced below for details. Impact In GNOME Epiphany an HTML document can trigger a client buffer overflow in...

7.5CVSS7.5AI score0.01968EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2024/02/21 12:0 a.m.•31 views

LibreOffice: Multiple Vulnerabilities

Background LibreOffice is a powerful office suite; its clean interface and powerful tools let you unleash your creativity and grow your productivity. Description Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details. Impact...

8.8CVSS7.6AI score0.01017EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2024/02/18 12:0 a.m.•31 views

GNU Tar: Out of Bounds Read

Background The GNU Tar program provides the ability to create tar archives, as well as various other kinds of manipulation. Description A vulnerability have been discovered in GNU Tar. Please review the CVE identifier referenced below for details. Impact GNU Tar has a one-byte out-of-bounds read...

5.5CVSS6.9AI score0.01476EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2024/01/31 12:0 a.m.•31 views

libaom: Multiple Vulnerabilities

Background libaom is the Alliance for Open Media's AV1 Codec SDK. Description Multiple vulnerabilities have been discovered in libaom. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

9.8CVSS7.7AI score0.02216EPSS
SaveExploits6
Gentoo Linux
Gentoo Linux
•added 2024/01/16 12:0 a.m.•31 views

libuv: Buffer Overread

Background libuv is a multi-platform support library with a focus on asynchronous I/O. Description libuv fails to ensure that a pointer lies within the bounds of a defined buffer in the uvidnatoascii function before reading and manipulating the memory at that address. Impact The overread can resu...

5.3CVSS6.9AI score0.23132EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
•added 2023/10/30 12:0 a.m.•31 views

rxvt-unicode: Arbitrary Code Execution

Background rxvt-unicode is a clone of the well known terminal emulator rxvt. Description A vulnerability has been discovered in rxvt-unicode. Please review the CVE identifiers referenced below for details. Impact in the Perl background extension, when an attacker can control the data written to t...

9.8CVSS6.6AI score0.02058EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2023/09/17 12:0 a.m.•31 views

Wireshark: Multiple Vulnerabilities

Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

7.5CVSS7.4AI score0.0462EPSS
SaveExploits14
Total number of security vulnerabilities3831