Lucene search
+L
MageiaMost viewed

6126 matches found

Mageia
Mageia
added 2016/08/31 5:34 p.m.36 views

Updated redis packages fix security vulnerability

It was discovered that redis did not properly protect redis-cli history files; they were created by default with world-readable permissions CVE-2013-7458...

3.3CVSS1.4AI score0.00484EPSS
SaveExploits0References2
Mageia
Mageia
added 2016/07/05 3:47 p.m.36 views

Updated iperf packages fix security vulnerability

A malicious process can connect to an iperf server and, by sending a malformed message on the control channel, corrupt the server process's heap area. This can lead to a crash and a denial of service, or theoretically a remote code execution as the user running the iperf server. A malicious iperf...

9.8CVSS2.3AI score0.06963EPSS
SaveExploits2References3
Mageia
Mageia
added 2016/06/10 7:06 p.m.36 views

Updated openslp packages fix security vulnerability

A null pointer dereference vulnerability was found in function xrealloc in xlspxmalloc.c in OpenSLP. A remote attacker could potentially crash the server when large number of packets are sent CVE-2016-4912...

7.5CVSS2.8AI score0.0536EPSS
SaveExploits1References2
Mageia
Mageia
added 2016/05/05 4:26 p.m.36 views

Updated xstream packages fix CVE-2016-3674

Updated xstream packages fix security vulnerability: XStream x-stream.github.io is a Java library to marshal Java objects into XML and back. For this purpose it supports a lot of different XML parsers. Some of those can also process external entities which was enabled by default. An attacker coul...

7.5CVSS3.6AI score0.08179EPSS
SaveExploits0References2
Mageia
Mageia
added 2016/02/17 7:06 p.m.36 views

Updated thunar packages fix CVE-2013-7447

Updated thunar packages fix security vulnerability: Due to a logic error, an attempt to allocate a large block of memory fails in thunargdkcairosetsurface, leading to a crash of thunar CVE-2013-7447...

6.5CVSS1.7AI score0.04633EPSS
SaveExploits0References2
Mageia
Mageia
added 2015/12/16 9:01 p.m.36 views

Updated quassel packages fix security vulnerability

The Quassel core could be crashed by a client using the op command, causing a denial of service CVE-2015-8547...

7.5CVSS7.3AI score0.02825EPSS
SaveExploits0References2
Mageia
Mageia
added 2015/11/26 8:47 p.m.36 views

Updated tigervnc packages fix security vulnerabilities

Updated tigervnc packages fix security vulnerabilities: An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way TigerVNC handled screen sizes. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code on the clien...

9.8CVSS9.6AI score0.03547EPSS
SaveExploits0References2
Mageia
Mageia
added 2015/10/30 8:11 p.m.36 views

Updated phpmyadmin package fixes security vulnerability

Content spoofing vulnerability when redirecting user to an external site CVE-2015-7873...

5CVSS6.4AI score0.02624EPSS
SaveExploits0References3
Mageia
Mageia
added 2015/02/26 8:26 a.m.36 views

Updated e2fsprogs packages fix CVE-2015-1572

Updated e2fsprogs packages fix security vulnerability: The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used to...

4.6CVSS9.3AI score0.00591EPSS
SaveExploits0References3
Mageia
Mageia
added 2015/02/26 8:26 a.m.36 views

Updated cabextract packages fix CVE-2015-2060

A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...

5.3CVSS5.5AI score0.02308EPSS
SaveExploits1References3
Mageia
Mageia
added 2015/01/20 2:57 p.m.36 views

Updated otrs package fixes CVE-2014-9324

Updated otrs package fixes security vulnerability: An attacker with valid OTRS credentials could access and manipulate ticket data of other users via the GenericInterface, if a ticket webservice is configured and not additionally secured CVE-2014-9324...

6CVSS6.3AI score0.01778EPSS
SaveExploits0References4
Mageia
Mageia
added 2015/01/09 4:44 p.m.36 views

Updated unrtf package fixes security vulnerability

Updated unrtf package fixes security vulnerability: Hanno Böck also reported a number of other crashes in unrtf besides the ones associated with CVE-2014-9275. These could allow a denial of service when opening a malicious malformed RTF file which causes unrtf to crash...

6.2AI score
SaveExploits0References2
Mageia
Mageia
added 2014/11/29 8:46 p.m.36 views

Updated geary package fixes security vulnerability

Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate CVE-2014-5444...

4.3CVSS6.2AI score0.01093EPSS
SaveExploits0References2
Mageia
Mageia
added 2014/11/26 5:29 p.m.36 views

Updated icecast package fixes security vulnerability

Icecast did not properly handle the launching of "scripts" on connect or disconnect of sources. This could result in sensitive information from these scripts leaking to external clients. CVE-2014-9018...

5CVSS6.1AI score0.02965EPSS
SaveExploits1References4
Mageia
Mageia
added 2014/11/26 5:29 p.m.36 views

Updated libksba packages fix security vulnerability

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service CVE-2014-9087...

7.5CVSS6.4AI score0.05167EPSS
SaveExploits0References3
Mageia
Mageia
added 2014/11/14 12:57 a.m.36 views

Updated kdebase4-workspace packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the KDE workspace configuration module for setting the date and time CVE-2014-8651, mga14487, and fixes some additional issues: - fix kcm botching unrelated user settings mga3310, bko254430, - do not popup during initialization 0 B Removable media...

7.2CVSS6.3AI score0.00388EPSS
SaveExploits0References5
Mageia
Mageia
added 2014/10/29 11:30 a.m.36 views

Updated php-ZendFramework packages fix security vulnerabilities

Due to a bug in PHP's LDAP extension, when ZendFramework's Zendldap class is used for logins, an attacker can login as any user by using a null byte to bypass the empty password check and perform an unauthenticated LDAP bind CVE-2014-8088. The sqlsrv PHP extension, which provides the ability to...

9.8CVSS10.1AI score0.0255EPSS
SaveExploits1References5
Mageia
Mageia
added 2014/09/07 9:56 a.m.36 views

Updated procmail packages fix CVE-2014-3618

Updated procmail package fixes security vulnerability: A heap-based buffer overflow was reported in procmail's formail utility when parsing addresses with unbalanced quotes CVE-2014-3618...

7.5CVSS8.3AI score0.08525EPSS
SaveExploits1References2
Mageia
Mageia
added 2014/09/05 9:07 a.m.36 views

Updated net-snmp packages fix CVE-2014-3565

Updated net-snmp packages fix security vulnerabilities: A remote denial-of-service flaw was found in the way snmptrapd handled certain SNMP traps when started with the "-OQ" option. If an attacker sent an SNMP trap containing a variable with a NULL type where an integer variable type was expected...

5CVSS8.5AI score0.04619EPSS
SaveExploits1References2
Mageia
Mageia
added 2014/09/05 9:07 a.m.36 views

Updated graphicsmagick packages fix CVE-2014-1947

Updated graphicsmagick packages fix security vulnerability: A buffer overflow flaw was found in the way GraphicsMagick writes PSD images when the input data has a large number of layers. Due to the compilation options used in Mageia, the buffer overflow is reduced to a crash, making this a denial...

7.8CVSS7.8AI score0.07024EPSS
SaveExploits5References2
Mageia
Mageia
added 2014/08/26 11:04 p.m.36 views

Updated grub2 package fixes security vulnerability

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker CVE-2014-4607. The grub2 package is built with a bundled copy of minilzo, which is a part...

8.8CVSS9.3AI score0.05315EPSS
SaveExploits1References2
Mageia
Mageia
added 2014/08/26 11:04 p.m.36 views

Updated icecream package fixes security vulnerability

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker CVE-2014-4607. The icecream package is built with a bundled copy of minilzo, which is a...

8.8CVSS9.3AI score0.05315EPSS
SaveExploits1References2
Mageia
Mageia
added 2014/07/26 12:46 p.m.36 views

Updated transmission package fixes security vulnerability

Ben Hawkes discovered that Transmission incorrectly handled certain peer messages. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code CVE-2014-4909...

6.8CVSS7.7AI score0.05406EPSS
SaveExploits1References1
Mageia
Mageia
added 2014/07/04 5:51 p.m.36 views

Updated libxfont packages fix security vulnerabilities

Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges CVE-2014-0209. Ilja van Sprundel discovered that libXfont incorrectly handled...

7.5CVSS8.1AI score0.04543EPSS
SaveExploits0References3
Mageia
Mageia
added 2014/06/06 6:08 a.m.36 views

Updated mediawiki packages fix security vulnerability

XSS vulnerability in MediaWiki before 1.22.7, due to usernames on Special:PasswordReset being parsed as wikitext. The username on Special:PasswordReset can be supplied by anyone and will be parsed with wgRawHtml enabled. Since Special:PasswordReset is whitelisted by default on private wikis, this...

2.6CVSS5.9AI score0.02097EPSS
SaveExploits0References4
Mageia
Mageia
added 2014/04/17 8:30 p.m.36 views

Updated cups-filters packages fix security vulnerability

Updated cups-filters packages fix security vulnerability: Sebastian Krahmer discovered it was possible to use malicious broadcast packets to execute arbitrary commands on a server running the cups- browsed daemon CVE-2014-2707. Note that only systems that have enabled the affected feature by usin...

8.3CVSS7.1AI score0.01174EPSS
SaveExploits1References2
Mageia
Mageia
added 2014/03/05 11:17 p.m.36 views

Updated libssh package fixes security vulnerability

When using libssh before 0.6.3, a libssh-based server, when accepting a new connection, forks and the child process handles the request. The RANDbytes function of openssl doesn't reset its state after the fork, but simply adds the current process id getpid to the PRNG state, which is not guarante...

1.9CVSS6.3AI score0.00356EPSS
SaveExploits1References3
Mageia
Mageia
added 2014/03/03 9:37 p.m.36 views

Updated python-logilab-common packages fix security vulnerabilities

Updated python-logilab-common packages fix security vulnerabilities about temporary file handling CVE-2014-1838 and CVE-2014-1839...

4.4CVSS6.6AI score0.00355EPSS
SaveExploits0References6
Mageia
Mageia
added 2013/11/09 6:58 p.m.36 views

Updated chromium-browser-stable packages fix multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Atte Kettunen of OUSPG discover a use-after-free issue in Blink's XML HTTP request implementation CVE-2013-2925. cloudfuzzer discovered a use-after-free issue in the list indenting implementation CVE-2013-2926. cloudfuzzer...

7.5CVSS0.7AI score0.01647EPSS
SaveExploits0References4
Mageia
Mageia
added 2013/09/13 8:29 p.m.36 views

Updated chromium-browser-stable package fix security vulnerabilities

The chrome 29 development team found various issues from internal fuzzing audits, and other studies CVE-2013-2887. Krystian Bigaj discovered a file handling path sanitization issue CVE-2013-2900. Alex Chapman discovered an integer overflow issue in ANGLE, the Almost Native Graphics Layer...

7.5CVSS1.2AI score0.01627EPSS
SaveExploits0References4
Mageia
Mageia
added 2013/08/22 6:08 p.m.36 views

Updated spice packages fix CVE-2013-4130

Updated spice packages fix security vulnerability: An user able to initiate spice connection to the guest could use a flaw in server/redchannel.c to crash the guest CVE-2013-4130...

5CVSS2AI score0.02629EPSS
SaveExploits0References2
Mageia
Mageia
added 2013/08/11 12:20 p.m.36 views

Updated xymon package fixes security vulnerability.

A security vulnerability has been found in version 4.x of the Xymon Systems & Network Monitor tool The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon "xymondrrd". File deletion is done with the privileges of the user that Xymon is running with, s...

5CVSS2.2AI score0.02829EPSS
SaveExploits0References2
Mageia
Mageia
added 2013/07/26 11:29 a.m.36 views

Updated ruby packages fix CVE-2013-4073

A vulnerability in Ruby's SSL client that could allow man-in-the-middle attackers to spoof SSL servers via valid certificate issued by a trusted certification authority CVE-2013-4073...

6.8CVSS5.4AI score0.02767EPSS
SaveExploits0References3
Mageia
Mageia
added 2026/06/12 11:28 p.m.35 views

Updated proftpd packages fix security vulnerabilities

CVE-2026-42167 modsql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands e.g., COPY TO PROGRAM. CVE-2026-44331 a SQL injection vulnerabili...

8.1CVSS6.4AI score0.07389EPSS
SaveExploits9References2
Mageia
Mageia
added 2026/06/12 11:28 p.m.35 views

Updated libssh packages fix security vulnerabilities

CVE-2026-0964 Improper sanitation of paths received from SCP servers CVE-2026-0965 The libssh can attempt to read non-regular files when misconfigured, which could cause resource exhaustion or blocking. CVE-2026-0966 Providing 0-length input for the sshgethexa causes 1-byte buffer underflow on...

8.2CVSS5.7AI score0.00582EPSS
SaveExploits0References7
Mageia
Mageia
added 2026/05/30 5:07 a.m.35 views

Updated perl-Template-Toolkit packages fix security vulnerability

Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. CVE-2026-5090...

6.1CVSS5.8AI score0.00282EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/05/01 6:51 a.m.35 views

Updated imagemagick packages fix security vulnerabilities

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. CVE-2025-43965 In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

7.5CVSS3.9AI score0.00553EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/02/25 4:58 p.m.35 views

Updated emacs packages fix a security vulnerability

A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

8.8CVSS8.7AI score0.02581EPSS
SaveExploits0References4
Mageia
Mageia
added 2025/01/26 3:20 a.m.35 views

Updated openssl packages fix security vulnerability

Timing side-channel in ECDSA signature computation. CVE-2024-13176...

4.1CVSS7AI score0.00613EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/11/13 6:48 p.m.35 views

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, java-21-openjdk & java-latest-openjdk packages fix security vulnerabilities

giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function. CVE-2023-48161 Array indexing integer overflow. CVE-2024-21210 HTTP client improper handling of maxHeaderSize. CVE-2024-21208 Unbounded allocation leads to out-of-memory error. CVE-2024-21217 Integer conversion error lea...

7.1CVSS7.1AI score0.01149EPSS
SaveExploits1References5
Mageia
Mageia
added 2024/10/14 6:46 p.m.35 views

Updated firefox firefox-l10n packages fix security vulnerabilities

The updated packages fix a security vulnerability: Use-after-free in Animation timeline. CVE-2024-9680 We are having some issues that are delaying the build for some architectures, so for the moment we are releasing this update just for x8664...

9.8CVSS7.1AI score0.23184EPSS
SaveExploits1References3
Mageia
Mageia
added 2024/09/16 5:44 p.m.35 views

Updated tcpreplay package fix security vulnerability

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclose...

7.8CVSS7.2AI score0.00437EPSS
SaveExploits1References2
Mageia
Mageia
added 2024/09/11 8:42 p.m.35 views

Updated expat packages fix security vulnerabilities

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490 An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...

9.8CVSS7.6AI score0.01686EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/09/10 4:40 p.m.35 views

Updated webmin package fixes security vulnerability

CVE-2024-2169: Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources...

7.5CVSS7AI score0.05397EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/07/15 4:54 p.m.35 views

Updated tomcat packages fix security vulnerability

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of...

7.5CVSS7.3AI score0.04602EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/05/25 11:39 p.m.35 views

Updated roundcubemail packages fix security vulnerabilities

This is a security update to the stable version 1.6 of Roundcube Webmail. Fix cross-site scripting XSS vulnerability in handling SVG animate attributes. Reported by Valentin T. and Lutz Wolf of CrowdStrike. Fix cross-site scripting XSS vulnerability in handling list columns from user preferences...

6.8AI score
SaveExploits0References2
Mageia
Mageia
added 2024/05/09 2:40 a.m.35 views

Updated exfatprogs packages fix security vulnerability

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in readfiledentryset. CVE-2023-45897...

5.5CVSS7.3AI score0.00381EPSS
SaveExploits1References2
Mageia
Mageia
added 2024/03/14 7:34 p.m.35 views

Updated fonttools packages fix security vulnerabilities

As of fonttools=4.28.2 the subsetting module has a XML External Entity Injection XXE vulnerability which allows an attacker to resolve arbitrary entities when a candidate font OT-SVG fonts, which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the filesystem...

7.5CVSS7.2AI score0.01238EPSS
SaveExploits1References3
Mageia
Mageia
added 2023/10/10 5:21 p.m.35 views

Updated cups packages fix security vulnerabilities

The updated packages fix security vulnerabilities: It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker could possibly use this issue to obtain recently printed documents. CVE-2023-32360 Due to failure in validating the length provided by an...

7CVSS7.2AI score0.00663EPSS
SaveExploits2References5
Mageia
Mageia
added 2023/03/31 12:13 a.m.35 views

Updated tigervnc/x11-server packages fix security vulnerability

DeepCopyPointerClasses use-after-free leads to privilege elevation. CVE-2023-0494...

7.8CVSS7.9AI score0.00899EPSS
SaveExploits0References12
Total number of security vulnerabilities5000