Lucene search
+L
MageiaMost viewed

6098 matches found

Mageia
Mageia
•added 2014/08/25 8:44 a.m.•34 views

Updated busybox packages fix CVE-2014-4607

Updated busybox packages fix security vulnerability: An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker CVE-2014-4607. Busybox bundles part ...

8.8CVSS9.3AI score0.05315EPSS
SaveExploits1References2
Mageia
Mageia
•added 2014/05/30 7:50 a.m.•34 views

Updated libgadu package fixes CVE-2014-3775

Updated libgadu packages fix security vulnerability: It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, o...

7.5CVSS7.6AI score0.0378EPSS
SaveExploits0References3
Mageia
Mageia
•added 2014/05/30 7:47 a.m.•34 views

Updated mumble packages fix two security vulnervabilitites

Updated mumble packages fix security vulnerabilities: In Mumble before 1.2.6, the Mumble client is vulnerable to a Denial of Service attack when rendering crafted SVG files that contain references to files on the local computer, due to an issue in Qt's SVG renderer module. This issue can be...

5CVSS6AI score0.02521EPSS
SaveExploits1References4
Mageia
Mageia
•added 2014/05/29 6:58 a.m.•34 views

Updated cifs-utils packages fix CVE-2014-2830

Updated cifs-utils packages fix security vulnerability: Sebastian Krahmer discovered a stack-based buffer overflow flaw in cifscreds.c CVE-2014-2830...

10CVSS6.8AI score0.05605EPSS
SaveExploits1References2
Mageia
Mageia
•added 2014/05/17 12:38 a.m.•34 views

Updated dovecot packages fix security vulnerability

Updated dovecot packages fix security vulnerability. Dovecot before 2.2.13 is vulnerable to a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly...

5CVSS6.3AI score0.03331EPSS
SaveExploits0References4
Mageia
Mageia
•added 2014/04/23 4:16 p.m.•34 views

Updated libmms packages fix CVE-2014-2892

Updated libmms packages fix security vulnerability: The libmms library before 0.6.4 is vulnerable to a buffer overflow in getanswer in src/mmsh.c. It may be triggered via an overly long line of a MMSH MMS over HTTP server response, effectively overflowing the buffer which has a static size...

7.5CVSS6.8AI score0.06147EPSS
SaveExploits1References2
Mageia
Mageia
•added 2014/04/17 8:30 p.m.•34 views

Updated cups-filters packages fix security vulnerability

Updated cups-filters packages fix security vulnerability: Sebastian Krahmer discovered it was possible to use malicious broadcast packets to execute arbitrary commands on a server running the cups- browsed daemon CVE-2014-2707. Note that only systems that have enabled the affected feature by usin...

8.3CVSS7.1AI score0.01174EPSS
SaveExploits1References2
Mageia
Mageia
•added 2014/04/04 10:58 a.m.•34 views

Updated a2ps packages fix CVE-2014-0466

Updated a2ps packages fix security vulnerability: Brian M. Carlson reported that a2ps's fixps script does not invoke gs with the -dSAFER option. Consequently executing fixps on a malicious PostScript file could result in files being deleted or arbitrary commands being executed with the privileges...

6.8CVSS7.7AI score0.02344EPSS
SaveExploits1References2
Mageia
Mageia
•added 2014/03/08 9:43 p.m.•34 views

Updated wireshark packages fix multiple vulnerabilies

Updated wireshark packages fix security vulnerabilities: The NFS dissector could crash CVE-2014-2281. The RLC dissector could crash CVE-2014-2283. The MPEG file parser could overflow a buffer CVE-2014-2299...

9.3CVSS6.8AI score0.47422EPSS
SaveExploits10References6
Mageia
Mageia
•added 2014/01/24 9:2 p.m.•34 views

Updated graphviz packages fix security vulnerabilities

Updated graphviz packages fix security vulnerabilities: Multiple buffer overflow vulnerabilities in graphviz due to an error within the "yyerror" function lib/cgraph/scan.l which can be exploited to cause a stack-based buffer overflow via a specially crafted file CVE-2014-0978 and the acceptance ...

10CVSS7.9AI score0.06082EPSS
SaveExploits2References3
Mageia
Mageia
•added 2013/12/12 10:22 p.m.•34 views

Updated samba package fixes multiple vulnerabilities

Updated samba packages fix security vulnerabilities: Samba before 3.6.22 incorrectly allows login from authenticated users if the requiremembershipof parameter of pamwinbind specifies only invalid group names CVE-2012-6150. It was discovered that multiple buffer overflows in the processing of...

8.3CVSS4.9AI score0.0379EPSS
SaveExploits1References4
Mageia
Mageia
•added 2013/11/22 7:9 p.m.•34 views

Updated wireshark packages fix multiple vulnerabilities

Updated wireshark packages fix security vulnerabilities: The IEEE 802.15.4 dissector could crash CVE-2013-6336. The NBAP dissector could crash CVE-2013-6337. The SIP dissector could crash CVE-2013-6338. The OpenWire dissector could go into a large loop CVE-2013-6339. The TCP dissector could crash...

4.3CVSS1.2AI score0.01987EPSS
SaveExploits2References8
Mageia
Mageia
•added 2013/10/25 9:10 p.m.•34 views

Updated dropbear packages fix CVE-2013-4421

Updated dropbear package fixes security vulnerability: Possible memory exhaustion denial of service due to the size of decompressed payloads in dropbear before 2013.59 CVE-2013-4421. Inconsistent delays in authorization failures could be used to disclose the existence of valid user accounts in...

5CVSS2.9AI score0.06424EPSS
SaveExploits0References3
Mageia
Mageia
•added 2013/08/11 12:20 p.m.•34 views

Updated xymon package fixes security vulnerability.

A security vulnerability has been found in version 4.x of the Xymon Systems & Network Monitor tool The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon "xymondrrd". File deletion is done with the privileges of the user that Xymon is running with, s...

5CVSS2.2AI score0.02829EPSS
SaveExploits0References2
Mageia
Mageia
•added 2025/11/18 2:47 a.m.•33 views

Updated apache packages fix security vulnerabilities

HTTP response splitting. CVE-2024-42516 SSRF with modheaders setting Content-Type header. CVE-2024-43204 modssl error log variable escaping. CVE-2024-47252 modproxyhttp2 denial of service. CVE-2025-49630 modssl access control bypass with session resumption. CVE-2025-23048 modssl TLS upgrade attac...

9.1CVSS6.9AI score0.04576EPSS
SaveExploits2References10
Mageia
Mageia
•added 2025/11/13 11:37 p.m.•33 views

Updated ruby packages fix security vulnerabilities

Net::IMAP vulnerable to possible DoS by memory exhaustion. CVE-2025-25186 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it...

7.5CVSS7.2AI score0.00818EPSS
SaveExploits0References2
Mageia
Mageia
•added 2025/05/23 8:6 p.m.•33 views

Updated chromium-browser-stable packages fix security vulnerabilities

Heap buffer overflow in HTML. CVE-2025-4096 Out of bounds memory access in DevTools. CVE-2025-4050 Insufficient data validation in DevTools. CVE-2025-4051 Inappropriate implementation in DevTools. CVE-2025-4052 Use after free in WebAudio. CVE-2025-4372 Insufficient policy enforcement in Loader...

9.8CVSS8AI score0.05368EPSS
SaveExploits3References4
Mageia
Mageia
•added 2025/03/24 5:27 p.m.•33 views

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.83 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links...

8.6CVSS7.3AI score0.00572EPSS
SaveExploits0References1
Mageia
Mageia
•added 2025/03/19 11:44 p.m.•33 views

Updated mosquitto packages fix security vulnerability

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function...

7.5CVSS7.1AI score0.01116EPSS
SaveExploits0References1
Mageia
Mageia
•added 2025/03/17 4:33 p.m.•33 views

Updated php packages fix security vulnerabilities

Bugs and security with streams have been fixed...

9.8CVSS7.2AI score0.00821EPSS
SaveExploits2References7
Mageia
Mageia
•added 2025/03/06 5:56 p.m.•33 views

Updated vim packages fix security vulnerability

Potential code execution with tar.vim and special crafted tar files...

7.1CVSS7.9AI score0.22474EPSS
SaveExploits0References2
Mageia
Mageia
•added 2025/03/06 5:56 p.m.•33 views

Updated ffmpeg packages fix security vulnerability

FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c. CVE-2024-35368...

9.8CVSS7.3AI score0.00715EPSS
SaveExploits0References2
Mageia
Mageia
•added 2025/02/25 4:58 p.m.•33 views

Updated emacs packages fix a security vulnerability

A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

8.8CVSS8.7AI score0.0256EPSS
SaveExploits0References4
Mageia
Mageia
•added 2025/01/22 3:19 a.m.•33 views

Updated rsync packages fix security vulnerabilities

Heap buffer overflow in rsync due to improper checksum length handling. CVE-2024-12084 Info leak via uninitialized stack contents. CVE-2024-12085 Rsync server leaks arbitrary client files. CVE-2024-12086 Path traversal vulnerability in rsync. CVE-2024-12087 Rsync --safe-links option bypass leads ...

9.8CVSS7.6AI score0.72059EPSS
SaveExploits8References5
Mageia
Mageia
•added 2024/12/21 8:16 p.m.•33 views

Updated tomcat packages fix security vulnerabilities

RCE due to TOCTOU issue in JSP compilation. CVE-2024-50379 DoS in examples web application. CVE-2024-54677...

9.8CVSS6.9AI score0.44312EPSS
SaveExploits13References4
Mageia
Mageia
•added 2024/12/17 7:42 p.m.•33 views

Updated socat packages fix security vulnerability

CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh...

9.8CVSS7.1AI score0.008EPSS
SaveExploits0References2
Mageia
Mageia
•added 2024/11/27 7:59 p.m.•33 views

Updated tomcat packages fix security vulnerabilities

Authentication bypass when using Jakarta Authentication API. CVE-2024-52316 Incorrect JSP tag recycling leads to XSS. CVE-2024-52318...

9.8CVSS7.4AI score0.06287EPSS
SaveExploits2References3
Mageia
Mageia
•added 2024/10/14 6:46 p.m.•33 views

Updated firefox firefox-l10n packages fix security vulnerabilities

The updated packages fix a security vulnerability: Use-after-free in Animation timeline. CVE-2024-9680 We are having some issues that are delaying the build for some architectures, so for the moment we are releasing this update just for x8664...

9.8CVSS7.1AI score0.23184EPSS
SaveExploits1References3
Mageia
Mageia
•added 2024/09/16 5:44 p.m.•33 views

Updated tcpreplay package fix security vulnerability

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclose...

7.8CVSS7.2AI score0.00437EPSS
SaveExploits1References2
Mageia
Mageia
•added 2024/07/15 4:54 p.m.•33 views

Updated tomcat packages fix security vulnerability

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of...

7.5CVSS7.3AI score0.04602EPSS
SaveExploits0References2
Mageia
Mageia
•added 2024/06/28 2:41 a.m.•33 views

Updated erofs-utils packages fix security vulnerabilities

Heap Buffer Overflow in the erofsfsckdirentiter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

7.8CVSS7.9AI score0.00815EPSS
SaveExploits2References2
Mageia
Mageia
•added 2024/06/17 5:44 p.m.•33 views

Updated iperf packages fix security vulnerability

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of message...

5.9CVSS6.7AI score0.01098EPSS
SaveExploits0References2
Mageia
Mageia
•added 2024/05/09 2:40 a.m.•33 views

Updated exfatprogs packages fix security vulnerability

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in readfiledentryset. CVE-2023-45897...

5.5CVSS7.3AI score0.00381EPSS
SaveExploits1References2
Mageia
Mageia
•added 2023/10/10 5:21 p.m.•33 views

Updated cups packages fix security vulnerabilities

The updated packages fix security vulnerabilities: It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker could possibly use this issue to obtain recently printed documents. CVE-2023-32360 Due to failure in validating the length provided by an...

7CVSS7.2AI score0.00663EPSS
SaveExploits2References5
Mageia
Mageia
•added 2023/05/16 7:17 p.m.•33 views

Updated connman packages fix security vulnerability

client.c in gdhcp in ConnMan could be used by network-adjacent attackers operating a crafted DHCP server to cause a stack-based buffer overflow and denial of service, terminating the connman process. CVE-2023-28488...

6.5CVSS7.2AI score0.00964EPSS
SaveExploits1References2
Mageia
Mageia
•added 2023/04/06 9:20 p.m.•33 views

Updated peazip packages fix security vulnerability

Denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. CVE-2023-24785...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References2
Mageia
Mageia
•added 2022/05/15 10:6 a.m.•33 views

Updated python-django-registration packages fix security vulnerability

Sensitive data could be included in error reports CVE-2021-21416...

3.7CVSS2.1AI score0.0041EPSS
SaveExploits0References2
Mageia
Mageia
•added 2021/12/19 12:26 p.m.•33 views

Updated pjproject packages fix security vulnerability

Updated pjproject packages fix security vulnerability: In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback and destroy, due to the accepted socket having no group lock. Second, the SSL socket parent/ listener may get...

5.9CVSS1.1AI score0.02082EPSS
SaveExploits0References1
Mageia
Mageia
•added 2021/07/16 8:25 a.m.•33 views

Updated aom packages fix security vulnerabilities

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap CVE-2021-30473. aomdsp/graintable.c in libaom in AOMedia before 2021-03-30 has a use-after-free CVE-2021-30474. aomdsp/noisemodel.c in libaom in AOMedia before 2021-03-24 has a buffer overflow...

9.8CVSS3.5AI score0.02216EPSS
SaveExploits0References2
Mageia
Mageia
•added 2021/07/04 2:13 a.m.•33 views

Updated file-roller packages fix security vulnerability

Updated file-roller package fixes security vulnerability: A path traversal vulnerability was found in file-roller due to an incomplete fix for CVE-2020-11736. It may still be possible to extract files outside of the intended directory in case of malicious archives containing symbolic links. The...

3.9CVSS1.3AI score0.00611EPSS
SaveExploits1References3
Mageia
Mageia
•added 2021/01/17 4:7 p.m.•33 views

Updated resteasy packages fix a security vulnerability

A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed CVE-2020-1695...

7.5CVSS1.3AI score0.02023EPSS
SaveExploits0References2
Mageia
Mageia
•added 2021/01/02 9:52 p.m.•33 views

Updated audacity package fixes security vulnerability

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there CVE-2020-11867...

3.3CVSS2.2AI score0.00469EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/11/10 3:20 p.m.•33 views

Updated lout packages fix security vulnerabilities

Lout 3.40 has a buffer overflow in the StringQuotedWord function in z39.c. CVE-2019-19917 Lout 3.40 has a heap-based buffer overflow in the srcnext function in z02.c. CVE-2019-19918...

7.8CVSS3.8AI score0.01599EPSS
SaveExploits2References3
Mageia
Mageia
•added 2020/09/30 10:1 a.m.•33 views

Updated gnutls packages fix security vulnerability

An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the...

7.5CVSS7.6AI score0.0373EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/09/27 8:6 p.m.•33 views

Updated cifs-utils packages fix security vulnerability

The mount.cifs utility has a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen in the context of the user calling mount CVE-2020-14342...

7CVSS7.4AI score0.00652EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/08/20 11:30 p.m.•33 views

Updated ngircd package fixes security vulnerability

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function. CVE-2020-14148...

7.5CVSS4.3AI score0.02643EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/07/07 1:47 p.m.•33 views

Updated pdns-recursor packages fix security vulnerability

Updated pdns-recursor package fixes security vulnerability: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the...

5.3CVSS2AI score0.01702EPSS
SaveExploits0References3
Mageia
Mageia
•added 2020/06/10 10:26 p.m.•33 views

Updated python-typed-ast packages fix security vulnerability

Updated python-typed-ast package fixes security vulnerabilities: typedast 1.3.0 and 1.3.1 has a handlekeywordonlyargs out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source but not necessarily execute it may be able to crash the interpreter process...

7.5CVSS4.6AI score0.03283EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/05/27 9:52 a.m.•33 views

Updated transmission packages fix security vulnerability

Updated transmission packages fix security vulnerability: Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted torrent file CVE-2018-10756...

7.8CVSS7.8AI score0.02632EPSS
SaveExploits2References2
Mageia
Mageia
•added 2020/05/05 12:20 p.m.•33 views

Updated ruby-json packages fix security vulnerability

Updated ruby-json packages fix security vulnerability: In ruby-json before 2.3.0, there is an unsafe object creation vulnerability. When parsing certain JSON documents, the json gem can be coerced into creating arbitrary objects in the target system CVE-2020-10663...

7.5CVSS3.4AI score0.06811EPSS
SaveExploits0References3
Total number of security vulnerabilities5000