Lucene search
+L
MageiaMost viewed

6209 matches found

Mageia
Mageia
added 2014/06/06 6:08 a.m.38 views

Updated mediawiki packages fix security vulnerability

XSS vulnerability in MediaWiki before 1.22.7, due to usernames on Special:PasswordReset being parsed as wikitext. The username on Special:PasswordReset can be supplied by anyone and will be parsed with wgRawHtml enabled. Since Special:PasswordReset is whitelisted by default on private wikis, this...

2.6CVSS5.9AI score0.02097EPSS
SaveExploits0References4
Mageia
Mageia
added 2014/04/17 8:30 p.m.38 views

Updated cups-filters packages fix security vulnerability

Updated cups-filters packages fix security vulnerability: Sebastian Krahmer discovered it was possible to use malicious broadcast packets to execute arbitrary commands on a server running the cups- browsed daemon CVE-2014-2707. Note that only systems that have enabled the affected feature by usin...

8.3CVSS7.1AI score0.01174EPSS
SaveExploits1References2
Mageia
Mageia
added 2014/03/05 11:17 p.m.38 views

Updated libssh package fixes security vulnerability

When using libssh before 0.6.3, a libssh-based server, when accepting a new connection, forks and the child process handles the request. The RANDbytes function of openssl doesn't reset its state after the fork, but simply adds the current process id getpid to the PRNG state, which is not guarante...

1.9CVSS6.3AI score0.00356EPSS
SaveExploits1References3
Mageia
Mageia
added 2014/03/02 8:58 p.m.38 views

Updated otrs package fixes security vulnerability

An attacker could send a specially prepared HTML email to OTRS. If he can then trick an agent into following a special link to display this email, JavaScript code would be executed CVE-2014-1695...

4.3CVSS8.5AI score0.04913EPSS
SaveExploits5References3
Mageia
Mageia
added 2014/01/24 9:02 p.m.38 views

Updated graphviz packages fix security vulnerabilities

Updated graphviz packages fix security vulnerabilities: Multiple buffer overflow vulnerabilities in graphviz due to an error within the "yyerror" function lib/cgraph/scan.l which can be exploited to cause a stack-based buffer overflow via a specially crafted file CVE-2014-0978 and the acceptance ...

10CVSS7.9AI score0.06082EPSS
SaveExploits2References3
Mageia
Mageia
added 2014/01/21 4:17 p.m.38 views

Updated libxfont packages fix security vulnerability

Updated libxfont packages fix security vulnerability: It was discovered that a buffer overflow in the processing of Glyph Bitmap Distribution fonts BDF could result in the execution of arbitrary code CVE-2013-6462...

9.3CVSS3.7AI score0.10254EPSS
SaveExploits1References3
Mageia
Mageia
added 2013/10/17 7:03 p.m.38 views

Updated torque packages fix CVE-2013-4319

Updated torque package fixes security vulnerability: A non-priviledged user who was able to run jobs or login to a node which ran pbsserver or pbsmom, could submit arbitrary jobs to a pbsmom daemon to queue and run the job, which would run as root CVE-2013-4319...

9CVSS2.4AI score0.02915EPSS
SaveExploits0References3
Mageia
Mageia
added 2013/10/17 6:49 p.m.38 views

Updated nmap package fixes CVE-2013-4885

Updated nmap packages fix security vulnerability: It is possible to write arbitrary files to a remote system, through a specially crafted server response for NMAP http-domino-enum-passwords.nse script from nmap before 6.40 CVE-2013-4885...

6.8CVSS2.6AI score0.07217EPSS
SaveExploits3References3
Mageia
Mageia
added 2013/07/26 11:29 a.m.38 views

Updated ruby packages fix CVE-2013-4073

A vulnerability in Ruby's SSL client that could allow man-in-the-middle attackers to spoof SSL servers via valid certificate issued by a trusted certification authority CVE-2013-4073...

6.8CVSS5.4AI score0.02767EPSS
SaveExploits0References3
Mageia
Mageia
added 2026/07/04 6:38 a.m.37 views

Updated yt-dlp packages fix security vulnerabilities

CVE-2026-50019 If curl is used as an external downloader for yt-dlp, cookies may be leaked to an unintended host upon HTTP redirect or when the host for download fragments differs from their parent manifest's. CVE-2026-50023 A vulnerability exists in yt-dlp that allows a remote attacker to write...

9.6CVSS6.6AI score0.00665EPSS
SaveExploits1References4
Mageia
Mageia
added 2026/06/06 5:36 a.m.37 views

Updated perl-DBIx-Class-EncodedColumn and new perl-Crypt-URandom-Token packages fix security vulnerabilities

The updated perl-DBIx-Class-EncodedColumn and new perl-Crypt-URandom-Token packages fix security issues: DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand function for salting password hashes in Digest.pm CVE-2025-27551 DBIx::Class::EncodedColumn until 0.00032 for Perl uses...

4CVSS5.4AI score0.00116EPSS
SaveExploits0References3
Mageia
Mageia
added 2026/06/05 5:37 p.m.37 views

Updated cockpit packages fix security vulnerabilities

CVE-2026-4631, Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects...

9.8CVSS7AI score0.1548EPSS
SaveExploits4References27
Mageia
Mageia
added 2026/06/02 5:23 a.m.37 views

Updated assimp packages fix security vulnerabilities

CVE-2025-2750,- A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to...

8.8CVSS5.9AI score0.0068EPSS
SaveExploits6References3
Mageia
Mageia
added 2026/06/02 5:23 a.m.37 views

Updated tar packages fix security vulnerability

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files...

5.5CVSS5.7AI score0.00401EPSS
SaveExploits1References4
Mageia
Mageia
added 2025/12/29 8:41 p.m.37 views

Updated ruby-rack packages fix security vulnerabilities

Unbounded-Parameter DoS in Rack::QueryParser. CVE-2025-46727 ReDoS Vulnerability in Rack::Multipart handlemimehead. CVE-2025-49007 Rack QueryParser has an unsafe default allowing paramslimit bypass via semicolon-separated parameters. CVE-2025-59830 Rack's unbounded multipart preamble buffering...

8.7CVSS6.9AI score0.01157EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/11/14 4:41 p.m.37 views

Updated webkit2 packages fix security vulnerabilities

CVE-2024-27838 A maliciously crafted webpage may be able to fingerprint the user. Description: The issue was addressed by adding additional logic. CVE-2024-27851 Processing maliciously crafted web content may lead to arbitrary code execution. Description: The issue was addressed with improved...

9.8CVSS9.6AI score0.01533EPSS
SaveExploits1References4
Mageia
Mageia
added 2025/03/27 4:14 p.m.37 views

Updated chromium-browser-stable packages fix security vulnerability

Use after free in Lens. CVE-2025-2476...

8.8CVSS7.4AI score0.01042EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/02/08 2:23 a.m.37 views

Updated libtasn1 packages fix security vulnerability

When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time to complete. This could be utilized for a remote DoS attack by presenting a crafted certificate to the network peer...

5.3CVSS7.3AI score0.0111EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/02/05 7:51 p.m.37 views

Updated python-django packages fix security vulnerabilities

An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a very large number of brackets. CVE-2024-38875 An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. T...

9.8CVSS8AI score0.28637EPSS
SaveExploits0References10
Mageia
Mageia
added 2025/01/26 3:20 a.m.37 views

Updated openssl packages fix security vulnerability

Timing side-channel in ECDSA signature computation. CVE-2024-13176...

4.1CVSS7AI score0.00613EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/01/25 9:32 p.m.37 views

Updated iperf packages fix security vulnerability

It was discovered that iperf 3.17.1 contains a segmentation violation via the iperfexchangeparameters function...

7.5CVSS6.9AI score0.00926EPSS
SaveExploits1References2
Mageia
Mageia
added 2025/01/10 7:54 p.m.37 views

Updated tinyproxy packages fix security vulnerabilities

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in processrequest function.. CVE-2022-40468 A use-after-free vulnerability exists in the HTTP Connection Headers...

9.8CVSS8.1AI score0.63076EPSS
SaveExploits3References6
Mageia
Mageia
added 2024/09/10 4:40 p.m.37 views

Updated webmin package fixes security vulnerability

CVE-2024-2169: Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources...

7.5CVSS7AI score0.05397EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/07/15 4:54 p.m.37 views

Updated tomcat packages fix security vulnerability

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of...

7.5CVSS7.3AI score0.04602EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/06/28 2:41 a.m.37 views

Updated libopenmpt packages fix security vulnerabilities

Possible out-of-bounds read or write when reading malformed MED files. r19389. Null-pointer write 32bit platforms or excessive memory allocation 64bit platforms when reading close to 4GiB of data from unseekable files r20336, r20338. Write buffer overflow when reading unseekable files close to 4G...

7.8AI score
SaveExploits0References6
Mageia
Mageia
added 2024/05/21 11:17 p.m.37 views

Updated stb packages fix security vulnerabilities

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

9.8CVSS8.1AI score0.0141EPSS
SaveExploits1References2
Mageia
Mageia
added 2023/10/23 10:05 p.m.37 views

Updated libcue packages fix a security vulnerability

Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it is then automatically scanned by tracker-miners. And because it has a .c...

8.8CVSS7.5AI score0.1657EPSS
SaveExploits1References2
Mageia
Mageia
added 2023/10/10 5:21 p.m.37 views

Updated cups packages fix security vulnerabilities

The updated packages fix security vulnerabilities: It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker could possibly use this issue to obtain recently printed documents. CVE-2023-32360 Due to failure in validating the length provided by an...

7CVSS7.2AI score0.0068EPSS
SaveExploits2References5
Mageia
Mageia
added 2023/07/07 5:54 a.m.37 views

Updated curaengine packages fix security vulnerability

Denial of service due to integer overflow CVE-2022-28041...

6.5CVSS7.2AI score0.02111EPSS
SaveExploits1References2
Mageia
Mageia
added 2022/12/13 10:09 p.m.37 views

Updated rootcerts packages fix security vulnerability

Set CKANSSSERVERDISTRUSTAFTER and CKANSSEMAILDISTRUSTAFTER for 3 TrustCor Root Certificates. r=KathleenWilson...

2.4AI score
SaveExploits0References3
Mageia
Mageia
added 2022/12/13 10:09 p.m.37 views

Updated matio packages fix security vulnerability

matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data and MatVarRead4. CVE-2020-36428 matio aka MAT File I/O Library 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy called from H5MMmalloc and...

8.8CVSS3.5AI score0.01503EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/07/25 9:41 p.m.37 views

Updated logrotate packages fix security vulnerability

Improved coredump handing for SUID binaries. bsc1192449...

1.5AI score
SaveExploits0References3
Mageia
Mageia
added 2022/03/24 9:03 a.m.37 views

Updated libpano13 packages fix security vulnerability

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine in parser.c. CVE-2021-33293...

9.1CVSS2.4AI score0.02099EPSS
SaveExploits1References2
Mageia
Mageia
added 2022/03/23 8:36 a.m.37 views

Updated sphinx packages fix security vulnerability

It was found that sphinx could allow arbitrary files to be read by abusing a configuration option. CVE-2020-29050...

7.5CVSS3AI score0.02166EPSS
SaveExploits2References4
Mageia
Mageia
added 2021/12/10 10:19 p.m.37 views

Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS2.3AI score0.01463EPSS
SaveExploits2References2
Mageia
Mageia
added 2021/10/31 11:12 a.m.37 views

Updated squid packages fix security vulnerability

Updated squid packages fix security vulnerability: Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody CVE-2021-28116...

5.3CVSS2.6AI score0.12948EPSS
SaveExploits0References4
Mageia
Mageia
added 2021/07/04 2:13 a.m.37 views

Updated networkmanager packages fix security vulnerability

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability. CVE-2021-20297...

5.5CVSS2.5AI score0.00256EPSS
SaveExploits0References1
Mageia
Mageia
added 2021/06/08 2:33 p.m.37 views

Updated libpano13 packages fix a security vulnerability

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20.rc2 and earlier can lead to read and write arbitrary memory values CVE-2021-20307...

9.8CVSS2.2AI score0.01941EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/02/10 6:41 p.m.37 views

Updated perl-Email-MIME and perl-Email-MIME-ContentType packages fix security vulnerability

Messages with too many tiny nested MIME parts can lead to memory exhaustion on split, resulting in denial of service rhbz1835353 This update limits the number of nested MIME parts to 10 by default, to avoid a possible memory exhaustion issue with lots of tiny MIME parts...

2.3AI score
SaveExploits0References3
Mageia
Mageia
added 2020/11/10 3:20 p.m.37 views

Updated lout packages fix security vulnerabilities

Lout 3.40 has a buffer overflow in the StringQuotedWord function in z39.c. CVE-2019-19917 Lout 3.40 has a heap-based buffer overflow in the srcnext function in z02.c. CVE-2019-19918...

7.8CVSS3.8AI score0.01599EPSS
SaveExploits2References3
Mageia
Mageia
added 2020/09/15 11:45 a.m.37 views

Updated libetpan packages fix a security vulnerability

LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a meddler-in-the-middle attacker and evaluates it in a TLS...

7.4CVSS2.1AI score0.02413EPSS
SaveExploits1References3
Mageia
Mageia
added 2020/09/02 8:01 a.m.37 views

Updated putty package fixes security vulnerability

PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client CVE-2020-14002...

5.9CVSS5.2AI score0.03146EPSS
SaveExploits0References3
Mageia
Mageia
added 2020/08/16 1:53 p.m.37 views

Updated znc packages fix security vulnerability

The znc package has been updated to version 1.8.1, containing several bugfixes and enhancements. See the upstream change logs for details...

6.5CVSS3.3AI score0.01845EPSS
SaveExploits0References4
Mageia
Mageia
added 2020/02/18 2:05 p.m.37 views

Updated sphinx packages fix security vulnerability

Updated sphinx packages fix security vulnerability: A vulnerability was found in Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet, unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only CVE-2019-14511...

7.5CVSS1.5AI score0.01909EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/01/05 3:37 p.m.37 views

Updated dia packages fix security vulnerability

Updated dia package fixes security vulnerability: An endless loop on filenames with invalid encoding CVE-2019-19451...

5.5CVSS2.9AI score0.0037EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/12/13 6:25 p.m.37 views

Updated kdelibs4 packages fix security vulnerability

kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction CVE-2019-14744...

7.8CVSS2.2AI score0.04069EPSS
SaveExploits1References3
Mageia
Mageia
added 2019/12/06 2:15 p.m.37 views

Updated tnef packages fix security vulnerability

Updated tnef package fixes security vulnerability: In tnef, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup CVE-2019-18849...

5.5CVSS3.2AI score0.01203EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/11/19 9:16 p.m.37 views

Updated ghostscript packages fix security vulnerability

The updated packages fix a security vulnerability: -dSAFER escape in .charkeys. CVE-2019-14869...

8.8CVSS1.3AI score0.03434EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/10/23 9:06 p.m.37 views

Updated libsndfile packages fix security vulnerability

Updated libsndfile package fixes security vulnerability: It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2019-3832...

5.5CVSS2.8AI score0.0051EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/07/21 6:17 p.m.37 views

Updated libreswan packages fix security vulnerability

The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects...

3.5CVSS4AI score0.00509EPSS
SaveExploits0References1
Total number of security vulnerabilities5000