Lucene search
+L
MageiaMost viewed

6098 matches found

Mageia
Mageia
•added 2018/11/15 10:4 p.m.•32 views

Updated flash-player-plugin packages fix security vulnerability

An important vulnerability in Adobe Flash Player 31.0.0.122 and earlier versions. Successful exploitation could lead to information disclosure. CVE-2018-15978...

7.5CVSS2.5AI score0.0743EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/11/15 10:4 p.m.•32 views

Updated teeworlds packages fix security vulnerability

It was discovered that incorrect connection setup in the server for Teeworlds, an online multi-player platform 2D shooter, could result in denial of service via forged connection packets rendering all game server slots occupied CVE-2018-18541. This update fixes it...

7.5CVSS2.5AI score0.03024EPSS
SaveExploits0References4
Mageia
Mageia
•added 2018/11/03 7:20 p.m.•32 views

Updated cimg and gmic packages fix security vulnerabilities

Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h CVE-2018-7587. An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp i...

7.8CVSS2.1AI score0.01349EPSS
SaveExploits8References3
Mageia
Mageia
•added 2018/09/21 4:26 p.m.•32 views

Updated soundtouch packages fix security vulnerability

Updated soundtouch package fixes security vulnerabilities: - Reachable assertion in FIRFilter.cpp causing denial of service CVE-2018-14045. - Reachable assertion in RateTransposer::setChannels causing denial of service CVE-2018-14044. - Heap-based buffer overflow in...

8.8CVSS4.1AI score0.02609EPSS
SaveExploits1References2
Mageia
Mageia
•added 2018/08/19 6:36 p.m.•32 views

Updated flash-player-plugin packages fix security vulnerabilities

Updated flash-player-plugin packages fix security vulnerabilities: Out-of-bounds read that can lead to Information Disclosure CVE-2018-12824, CVE-2018-12826, CVE-2018-12827 Security bypass that can lead to Security Mitigation Bypass CVE-2018-12825 Use of a component with a known vulnerability can...

9.8CVSS2.5AI score0.32032EPSS
SaveExploits3References2
Mageia
Mageia
•added 2018/04/22 7:59 p.m.•32 views

Updated libcdio packages fix security vulnerabilities

A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS CVE-2017-18198. A NULL pointer dereference flaw was...

9.8CVSS1.1AI score0.03363EPSS
SaveExploits1References2
Mageia
Mageia
•added 2018/02/24 11:25 p.m.•32 views

Updated advancecomp packages fix security vulnerability

Joonun Jang discovered a vulnerability in AdvanceCOMP that could be used to crash or run programs if it opened a specially crafted ZIP file...

7.8CVSS2.1AI score0.01422EPSS
SaveExploits1References1
Mageia
Mageia
•added 2018/02/06 3:35 p.m.•32 views

Updated php-smarty packages fix security vulnerability

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template nameCVE-2017-1000480...

9.8CVSS1.4AI score0.03124EPSS
SaveExploits0References1
Mageia
Mageia
•added 2018/01/12 7:49 p.m.•32 views

Updated flash-player-plugin package fixes security vulnerability

Adobe Flash Player 28.0.0.137 addresses an important out-of-bounds read vulnerability that could lead to information exposure CVE-2018-4871...

7.5CVSS2.4AI score0.05509EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/01/06 10:14 a.m.•32 views

Updated openafs packages fixes security vulnerability

This update provides an update to openafs 1.6.22, fixing the following security issue: It was discovered that malformed jumbogram packets could result in denial of service against OpenAFS CVE-2017-17432. It also adds support for 4.14 series kernels...

7.8CVSS2.9AI score0.03053EPSS
SaveExploits0References4
Mageia
Mageia
•added 2018/01/04 4:48 p.m.•32 views

Updated wildmidi packages fix security vulnerabilities

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI before 0.4.2 can cause a denial of serviceinvalid memory read and application crash via a crafted mid file CVE-2017-11661. The WMParseNewMidi function in fmidi.c in WildMIDI before 0.4.2 can cause a denial of serviceinvalid memory...

7.5CVSS3.3AI score0.10772EPSS
SaveExploits7References2
Mageia
Mageia
•added 2018/01/03 10:32 a.m.•32 views

Updated libplist packages fix security vulnerability

The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data CVE-2017-5209. The main function in plistutil.c in libimobiledevice libplist allowed attackers to...

9.1CVSS4.7AI score0.03799EPSS
SaveExploits6References3
Mageia
Mageia
•added 2017/08/24 9:18 p.m.•32 views

Updated perltidy packages fix security vulnerability

perltidy relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink CVE-2016-10374...

5.5CVSS3.7AI score0.0032EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/06/14 3:52 p.m.•32 views

Updated tor packages fix security vulnerability

A remotely triggerable assertion failure caused by receiving a BEGINDIR cell on a hidden service rendezvous circuit CVE-2017-0376...

7.5CVSS2.3AI score0.02176EPSS
SaveExploits1References2
Mageia
Mageia
•added 2017/06/10 7:1 a.m.•32 views

Updated gajim packages fix security vulnerability

Gajim unconditionally implements the "XEP-0146: Remote Controlling Clients" extension, which may be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions CVE-2016-10376...

4.5CVSS3.7AI score0.01153EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/03/27 9:27 p.m.•32 views

Updated mbedtls packages fix security vulnerability

In mbedTLS before 1.3.19, if a malicious peer supplies a certificate with a specially crafted secp224k1 public key, then an attacker can cause the server or client to attempt to free block of memory held on stack. Depending on the platform, this could result in a Denial of Service client crash or...

8.1CVSS2.5AI score0.03418EPSS
SaveExploits2References4
Mageia
Mageia
•added 2017/03/17 11:12 a.m.•32 views

Updated wavpack packages fix security vulnerability

Hanno Böck discovered a global buffer overread vulnerability in WavPack's word parsing logic CVE-2016-10169, this update fixes it...

5.5CVSS2.3AI score0.02123EPSS
SaveExploits1References3
Mageia
Mageia
•added 2016/11/14 7:8 a.m.•32 views

Updated monit packages fix security vulnerability

The forms in Monit's Service Manager are vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host, disable/enable monitoring for a specific service CVE-2016-7067...

6.5CVSS2.3AI score0.00882EPSS
SaveExploits1References2
Mageia
Mageia
•added 2016/11/14 7:8 a.m.•32 views

Updated python-cryptography package fixes security vulnerability

Fixed a bug where HKDF would return an empty byte-string if used with a length less than algorithm.digestsize. CVE-2016-9243...

7.5CVSS1.4AI score0.03399EPSS
SaveExploits0References3
Mageia
Mageia
•added 2016/09/21 8:38 p.m.•32 views

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 11.2.202.635 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves an integer overflow vulnerability that could lead to code execution CVE-2016-4287. Th...

9.3CVSS3.1AI score0.19443EPSS
SaveExploits3References2
Mageia
Mageia
•added 2016/07/26 10:11 p.m.•32 views

Updated mupdf packages fix security vulnerability

Use-after-free issue in mupdf in pdfloadxref can cause a denial of service CVE-2016-6265...

5.5CVSS3AI score0.0163EPSS
SaveExploits1References2
Mageia
Mageia
•added 2016/05/21 10:11 p.m.•32 views

Updated networkmanager packages fix CVE-2016-0764

Updated networkmanager package fixes security vulnerability: NetworkManager before 1.0.12 is vulnerable to a race condition that could lead to a local information leak CVE-2016-0764. The networkmanager package has been updated to version 1.0.12, which fixes this issue and several other bugs. See...

6.2CVSS3.1AI score0.00264EPSS
SaveExploits0References4
Mageia
Mageia
•added 2016/05/21 10:11 p.m.•32 views

Updated jansson packages fix CVE-2016-4425

Updated jansson packages fix security vulnerability: Gustavo Grieco discovered that jansson did not limit the recursion depth when parsing JSON arrays and objects. This could allow remote attackers to cause a denial of service crash via stack exhaustion, using crafted JSON data CVE-2016-4425...

7.5CVSS4.9AI score0.01894EPSS
SaveExploits0References2
Mageia
Mageia
•added 2016/03/25 6:38 a.m.•32 views

Updated krb5 packages fix security vulnerability

It was reported that in all versions of MIT krb5, an authenticated attacker with permission to modify a principal entry can cause kadmind to dereference a null pointer by supplying an empty DB argument to the modifyprincipal command, if kadmind is configured to use the LDAP KDB module...

5.3CVSS3.2AI score0.39969EPSS
SaveExploits0References3
Mageia
Mageia
•added 2016/02/17 7:6 p.m.•32 views

Updated gambas3 packages fix CVE-2013-7447

Updated gambas3 packages fix security vulnerability: Due to a logic error, an attempt to allocate a large block of memory fails in gtcairocreatesurface, leading to a crash of gambas3 CVE-2013-7447...

6.5CVSS1.7AI score0.04633EPSS
SaveExploits0References2
Mageia
Mageia
•added 2016/02/05 5:26 p.m.•32 views

Updated cgit packages fix security vulnerability

Reflected Cross Site Scripting and Header Injection in Mimetype Query String in cgit before 0.12 CVE-2016-1899. Stored Cross Site Scripting and Header Injection in Filename Parameter in cgit before 0.12 CVE-2016-1900. Integer Overflow resulting in Buffer Overflow in cgit before 0.12 CVE-2016-1901...

9.8CVSS1.7AI score0.03791EPSS
SaveExploits1References2
Mageia
Mageia
•added 2015/12/17 8:19 p.m.•32 views

Updated python-pygments packages fix security vulnerability

An unsafe use of string concatenation in a shell string occurs in FontManager. If the developer allows the attacker to choose the font and outputs an image, the attacker can execute any shell command on the remote system. The name variable injected comes from the constructor of FontManager, which...

9.3CVSS9AI score0.06664EPSS
SaveExploits0References3
Mageia
Mageia
•added 2015/11/27 11:11 p.m.•32 views

Updated lightdm packages fix security vulnerability

Updated lightdm corrects a possible denial of service attack CVE-2015-8316...

5.9CVSS5.9AI score0.01748EPSS
SaveExploits0References2
Mageia
Mageia
•added 2015/11/02 8:21 p.m.•32 views

Updated openafs packages fix security vulnerabilities

Updated openafs packages fix security vulnerabilities: When constructing an Rx acknowledgment ACK packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol CVE-2015-7762...

5CVSS6.3AI score0.02133EPSS
SaveExploits0References6
Mageia
Mageia
•added 2015/07/01 12:40 p.m.•32 views

Updated python-tornado package fixes security vulnerability

Security fixes CVE-2014-9720 The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by ...

6.5CVSS6.4AI score0.0251EPSS
SaveExploits0References3
Mageia
Mageia
•added 2015/05/06 4:44 p.m.•32 views

Updated dpkg packages fix CVE-2015-0840

Updated dpkg packages fix security vulnerability: The dpkg-source command in Debian dpkg before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file .dsc CVE-2015-0840...

4.3CVSS6.4AI score0.01827EPSS
SaveExploits0References3
Mageia
Mageia
•added 2015/05/03 12:19 a.m.•32 views

Updated fcgi packages fix CVE-2012-6687

Updated fcgi packages fix security vulnerability: FCGI does not perform range checks for file descriptors before use of the FDSET macro. This FDSET macro could allow for more than 1024 total file descriptors to be monitored in the closing state. This may allow remote attackers to cause a denial o...

5CVSS2.8AI score0.06086EPSS
SaveExploits0References2
Mageia
Mageia
•added 2015/04/15 9:1 a.m.•32 views

Updated socat packages fix CVE-2015-1379

Updated socat package fixes security vulnerability: In socat before 2.0.0-b8, signal handler implementations are not async-signal-safe and can cause crash or freeze of socat processes. Mostly this issue occurs when socat is in listening mode with fork option and a couple of child processes...

7.5CVSS7.4AI score0.0393EPSS
SaveExploits0References2
Mageia
Mageia
•added 2015/04/03 1:11 p.m.•32 views

Updated libtasn1 packages fix CVE-2015-2806

Updated libtasn1 packages fix security vulnerability: The libtasn1 library before version 4.4 is vulnerable to a two-byte stack overflow in asn1derdecoding CVE-2015-2806...

10CVSS6.5AI score0.07746EPSS
SaveExploits0References2
Mageia
Mageia
•added 2015/02/19 4:37 p.m.•32 views

Updated tomcat packages fix CVE-2014-0227

Updated tomcat packages fix security vulnerability: In Apache Tomcat 7.x before 7.0.55, it was possible to craft a malformed chunk as part of a chunked request that caused Tomcat to read part of the request body as a new request CVE-2014-0227...

6.4CVSS6.9AI score0.21045EPSS
SaveExploits0References2
Mageia
Mageia
•added 2014/12/05 4:59 p.m.•32 views

Updated openvpn package fixes CVE-2014-8104

Updated openvpn packages fix security vulnerability: Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of service CVE-2014-8104...

6.8CVSS6.2AI score0.03478EPSS
SaveExploits0References2
Mageia
Mageia
•added 2014/11/21 1:38 p.m.•32 views

Updated kdebase4-workspace packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the KDE workspace configuration module for setting the date and time CVE-2014-8651, mga14578, and fixes some additional issues: - fix foreground color for GTK2 menus bko127861, - improve contrast for rendering checkbox marks, arrows, etc. bko337433,...

7.2CVSS6.3AI score0.00388EPSS
SaveExploits0References5
Mageia
Mageia
•added 2014/11/21 12:44 p.m.•32 views

Updated php-smarty packages fix security vulnerability

Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template CVE-2014-8350...

7.5CVSS7.3AI score0.03127EPSS
SaveExploits1References2
Mageia
Mageia
•added 2014/11/12 9:56 a.m.•32 views

Updated apt packages fix security vulnerability

The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the "http" apt method binary, or potentially to arbitrary cod...

6.8CVSS9.7AI score0.02437EPSS
SaveExploits0References2
Mageia
Mageia
•added 2014/06/06 5:45 p.m.•32 views

Updated perl-LWP-Protocol-https package fixes CVE-2014-3230

Updated perl-LWP-Protocol-https package fixes security vulnerability: It was reported that libwww-perl LWP, when using IO::Socket::SSL the default and when the HTTPSCADIR or HTTPSCAFILE environment variables were set, would disable server certificate verification, when the intent was to only...

5.9CVSS6AI score0.01338EPSS
SaveExploits1References2
Mageia
Mageia
•added 2013/12/06 9:55 p.m.•32 views

Updated links package fixes security vulnerability

Mikulas Patocka discovered an integer overflow in the parsing of HTML tables in the Links web browser. This can only be exploited when running Links in graphical mode CVE-2013-6050...

4.3CVSS3AI score0.01221EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/10/17 7:37 p.m.•32 views

Updated libtar packages fixes security vulnerability

Two heap-based buffer overflow flaws were found in the way libtar handled certain archives. If a user were tricked into expanding a specially-crafted archive, it could cause the libtar executable or an application using libtar to crash or, potentially, execute arbitrary code CVE-2013-4397...

6.8CVSS4AI score0.05485EPSS
SaveExploits1References2
Mageia
Mageia
•added 2013/10/11 5:35 p.m.•32 views

Updated davfs2 packages fix CVE-2013-4362

Updated davfs2 package fixes security vulnerability: Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation. CVE-2013-4362...

7.2CVSS2.9AI score0.01168EPSS
SaveExploits3References2
Mageia
Mageia
•added 2013/09/13 8:29 p.m.•32 views

Updated chromium-browser-stable package fix security vulnerabilities

The chrome 29 development team found various issues from internal fuzzing audits, and other studies CVE-2013-2887. Krystian Bigaj discovered a file handling path sanitization issue CVE-2013-2900. Alex Chapman discovered an integer overflow issue in ANGLE, the Almost Native Graphics Layer...

7.5CVSS1.2AI score0.01627EPSS
SaveExploits0References4
Mageia
Mageia
•added 2013/09/13 8:16 p.m.•32 views

Updated python-OpenSSL package fixes security vulnerability

The string formatting of subjectAltName X509Extension instances in pyOpenSSL before 0.13.1 incorrectly truncated fields of the name when encountering a null byte, possibly allowing man-in-the-middle attacks through certificate spoofing CVE-2013-4314...

4.3CVSS3AI score0.01197EPSS
SaveExploits0References3
Mageia
Mageia
•added 2013/08/22 6:20 p.m.•32 views

Updated libtiff packagess fix multiple security vulnerabilities

Updated libtiff packages fix security vulnerabilities: Pedro Ribeiro discovered a buffer overflow flaw in rgb2ycbcr, a tool to convert RGB color, greyscale, or bi-level TIFF images to YCbCr images, and multiple buffer overflow flaws in gif2tiff, a tool to convert GIF images to TIFF. A remote...

6.8CVSS3.8AI score0.07399EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/06/26 6:12 p.m.•32 views

Updated perl-Module-Signature package fixes CVE-2013-2145

Arbitrary code execution vulnerability in Module::Signature before 0.72 CVE-2013-2145...

4.4CVSS3AI score0.00557EPSS
SaveExploits1References2
Mageia
Mageia
•added 2026/06/18 9:28 p.m.•31 views

Updated luajit packages fix security vulnerabilities

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. CVE-2019-19391 LuaJIT through 2.1.0-beta3 h...

9.8CVSS7.1AI score0.01469EPSS
SaveExploits4References3
Mageia
Mageia
•added 2026/05/30 5:7 a.m.•31 views

Updated perl-Template-Toolkit packages fix security vulnerability

Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. CVE-2026-5090...

6.1CVSS5.8AI score0.00282EPSS
SaveExploits0References2
Mageia
Mageia
•added 2025/06/09 6:14 p.m.•31 views

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.93 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

9.8CVSS8.2AI score0.11039EPSS
SaveExploits2References6
Total number of security vulnerabilities5000