Lucene search
+L
DebianDebian Linux

10003 matches found

CVE
CVE
added 2017/01/27 10:01 p.m.193 views

CVE-2017-3257

CVE-2017-3257 affects the MySQL Server component (Server: InnoDB). Affected: MySQL 5.6.34 and earlier and 5.7.16 and earlier. Description from multiple sources: an attacker with network access via multiple protocols and low privileges can exploit this to cause a hang or a repeated crash (partial ...

6.5CVSS6.1AI score0.0257EPSS
Save
CVE
CVE
added 2020/07/22 4:16 p.m.193 views

CVE-2020-6531

CVE-2020-6531 describes a side-channel information leakage in Chrome/Chromium’s Scroll to Text feature. A crafted HTML page could allow a remote attacker to leak cross-origin data. Public details indicate the issue affects Chrome/Chromium versions prior to 84.0.4147.89, with Debian noting a fix i...

4.3CVSS4.9AI score0.01574EPSS
Save
CVE
CVE
added 2020/09/21 7:06 p.m.193 views

CVE-2020-6568

CVE-2020-6568 affects Google Chrome on Android prior to 85.0.4183.83, where insufficient policy enforcement in the intent handling could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue is tied to Chrome/Chromium ecosystem; Debian/Fedora advisories refe...

6.5CVSS6.2AI score0.01502EPSS
Save
CVE
CVE
added 2021/04/29 3:34 p.m.193 views

CVE-2021-20228

CVE-2021-20228 affects Ansible Engine 2.9.18 where sensitive info is not masked by default and not protected by no_log when using the basic.py sub-option, impacting confidentiality. Multiple connected advisories confirm the issue and note updates/patches: IBM ESS (fix to 6.0.2.1), Debian security...

7.5CVSS7AI score0.0206EPSS
Save
CVE
CVE
added 2022/03/11 12:00 a.m.193 views

CVE-2022-0909

CVE-2022-0909 affects libtiff 4.3.0 and its tiffcrop component, caused by a division-by-zero in computeOutputPixelOffsets() that can crash the application via a crafted TIFF file (DoS). Public advisories (Arch Linux ASA-202204-6, ALAS/ALAS2, Debian DSA-5108-1) indicate fixes in libtiff 4.3.0-2 or...

5.5CVSS5.8AI score0.0133EPSS
Save
CVE
CVE
added 2022/05/04 5:05 p.m.193 views

CVE-2022-20771

The CVE-2022-20771 issue affects the ClamAV TIFF file parser. It is a denial-of-service vulnerability that could be exploited by an unauthenticated, remote attacker by processing a crafted TIFF file. Affected versions include ClamAV 0.104.0–0.104.2 and the LTS line 0.103.5 and earlier. Public adv...

7.8CVSS7.4AI score0.05792EPSS
Save
CVE
CVE
added 2022/05/04 5:05 p.m.193 views

CVE-2022-20785

CVE-2022-20785 affects ClamAV HTML file parser. Vulnerable versions: 0.1040–0.1042 and LTS 0.103.5 and earlier. Condition: unauthenticated remote attacker can cause a denial-of-service on the affected device. Description points to the ClamAV blog for details; no exploit specifics are provided in ...

7.8CVSS7.3AI score0.07009EPSS
Save
CVE
CVE
added 2024/04/16 7:49 p.m.193 views

CVE-2022-24807

Net-snmp vulnerability CVE-2022-24807: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can lead to an out-of-bounds memory access. Exploitable by a user with read-write credentials. A fix was released in Net-SNMP 5.9.2. Recommendation: upgrade to 5.9.2 or newer; use s...

6.5CVSS6.2AI score0.01008EPSS
Save
CVE
CVE
added 2022/07/25 12:00 a.m.193 views

CVE-2022-26306

CVE-2022-26306 affects The Document Foundation LibreOffice (7.2.x before 7.2.7; 7.3.x before 7.3.1). The vulnerability = static initialization vector used to encrypt web connection passwords stored in the user configuration database, weakening the encryption if an attacker gains access to the con...

7.5CVSS7.9AI score0.01005EPSS
Save
CVE
CVE
added 2022/10/21 12:00 a.m.193 views

CVE-2022-3598

CVE-2022-3598 affects LibTIFF 4.4.0 via an out-of-bounds write in extractContigSamplesShifted24bits (tools/tiffcrop.c:3604), enabling denial-of-service with a crafted TIFF file. For those building LibTIFF from source, the fix is present in commit cfbb883b. Connected documents corroborate this iss...

6.5CVSS6.6AI score0.01001EPSS
Save
CVE
CVE
added 2022/11/09 12:00 a.m.193 views

CVE-2022-45060

CVE-2022-45060 – Varnish Cache HTTP/2 header forgery affects Varnish Cache 5.x and 6.x up to before 6.0.11, 7.x up to before 7.1.2, and 7.2.x up to before 7.2.1. An attacker can inject characters in HTTP/2 pseudo-headers that are invalid for HTTP/1 request lines, causing the Varnish server to gen...

7.5CVSS7.3AI score0.00979EPSS
Save
CVE
CVE
added 2024/05/17 2:24 p.m.193 views

CVE-2023-52686

CVE-2023-52686 involves a Linux kernel vulnerability where a null pointer check is missing in powerpc/powernv opal_event_init() and kasprintf() can return NULL on allocation failure. Exploitation could lead to a denial of service via NULL pointer dereference; this has been addressed with a kernel...

5.5CVSS6.6AI score0.0025EPSS
Save
CVE
CVE
added 2024/02/08 12:00 a.m.193 views

CVE-2024-25189

The CVE concerns libjwt: 1.15.3 uses strcmp (not constant time) to verify authentication, enabling a timing side‑channel bypass. Connected sources confirm this is a legitimate vulnerability with high impact (CVE-2024-25189) and note Debian LTS advisories and Debian/DLA entries recommending an upg...

9.8CVSS9.3AI score0.00954EPSS
Save
CVE
CVE
added 2024/05/01 1:00 p.m.193 views

CVE-2024-27059

CVE-2024-27059 refers to a Linux kernel vulnerability in the usb-storage isd200 sub-driver. The issue arises from using ATA ID values HEADS and SECTORS to derive cylinder/head for READ/WRITE CDBs; division/modulus by zero could occur if either value is 0. The fix blocks binding to devices with AT...

5.5CVSS6.3AI score0.00242EPSS
Save
CVE
CVE
added 2024/10/21 11:53 a.m.193 views

CVE-2024-47698

CVE-2024-47698 (Linux kernel) affects DVB frontends rtl2830/rtl2832 in the media/dvb-frontends subsystem. The issue is an out-of-bounds write in the pid_filter logic for rtl2832, caused by not enforcing the maximum index on bit manipulations (dev->filters is 32-bit; indices must be 0–31). The ...

7.8CVSS8.2AI score0.00268EPSS
Save
CVE
CVE
added 2025/05/01 1:07 p.m.193 views

CVE-2025-37789

CVE-2025-37789 (net: openvswitch: fix nested key length validation in the set() action) is covered by connected advisories, which confirm a Linux kernel vulnerability in netlink key length handling for the set() action in Open vSwitch. The description notes that accessing nla_len(ovs_key) is unsa...

7.8CVSS6.5AI score0.00203EPSS
Save
CVE
CVE
added 2015/01/09 9:00 p.m.192 views

CVE-2014-9584

CVE-2014-9584 affects the Linux kernel where the function parse_rock_ridge_inode_internal in fs/isofs/rock.c does not validate a length value in the ER System Use Field, enabling local users to obtain sensitive kernel memory via a crafted iso9660 image. This vulnerability exists in kernels before...

2.1CVSS4.5AI score0.00461EPSS
Save
CVE
CVE
added 2015/01/21 6:00 p.m.192 views

CVE-2015-0383

CVE-2015-0383 relates to an unspecified local vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4/R28.3.4, with impact to integrity and availability via Hotspot, as per the initial description. Connected documents reference multiple Java/Op...

5.4CVSS3.6AI score0.00453EPSS
Save
CVE
CVE
added 2018/06/11 9:00 p.m.192 views

CVE-2016-9898

CVE-2016-9898 is a use-after-free vulnerability in Mozilla Firefox/Thunderbird affecting Firefox <50.1, Firefox ESR <45.6, and Thunderbird

9.8CVSS8.9AI score0.03512EPSS
Save
CVE
CVE
added 2018/05/18 7:00 p.m.192 views

CVE-2017-18271

ImageMagick 7.0.7-16 (Q16, x86_64) contains an infinite loop vulnerability in ReadMIFFImage (coders/miff.c) that can cause a Denial of Service via a crafted MIFF image. This is CVE-2017-18271. The description specifies CPU exhaustion as impact. No other details (exploit specifics, affected platfo...

7.1CVSS7AI score0.02241EPSS
Save
CVE
CVE
added 2017/05/22 4:54 a.m.192 views

CVE-2017-2520

CVE-2017-2520 (SQLite, affected Apple OSes) is a vulnerability where a crafted SQL statement could cause a buffer overflow, enabling remote code execution or a denial of service. Affected products/versions (from provided sources): Apple iOS <10.3.2, macOS <10.12.5, tvOS <10.2.1, watchOS

9.8CVSS8.8AI score0.04643EPSS
Save
CVE
CVE
added 2018/06/11 9:00 p.m.192 views

CVE-2017-5407

CVE-2017-5407 describes a information-disclosure flaw in SVG filters due to floating-point timing side channels that can leak pixel data and history across origins. Affected products include Mozilla Firefox and Thunderbird versions older than 52 (Firefox ESR older than 45.8; Thunderbird older tha...

6.5CVSS6.7AI score0.02771EPSS
Save
CVE
CVE
added 2018/06/11 9:00 p.m.192 views

CVE-2017-5408

CVE-2017-5408: Cross-origin reading of video captions in Mozilla products due to missing CORS header checks. Affected: Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, Thunderbird

5.3CVSS6.1AI score0.02597EPSS
Save
CVE
CVE
added 2018/06/11 9:00 p.m.192 views

CVE-2017-7784

The CVE-2017-7784 issue is a use-after-free in the image observer during frame reconstruction after the observer has been freed, affecting Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

9.8CVSS8.3AI score0.03572EPSS
Save
CVE
CVE
added 2018/03/05 2:00 p.m.192 views

CVE-2018-1000115

CVE-2018-1000115 – Memcached UDP amplification vulnerability. Memcached 1.5.5 contains an Insufficient Control of Network Message Volume (CWE-406) in UDP support, enabling a remote attacker to perform a denial-of-service via UDP traffic to port 11211 (amplification ~1:50,000). The issue is mitiga...

7.5CVSS7.4AI score0.88114EPSS
Save
CVE
CVE
added 2018/07/27 4:00 a.m.192 views

CVE-2018-14609

CVE-2018-14609 affects the Linux kernel (up to 4.17.10) with an invalid pointer dereference in __del_reloc_root() of fs/btrfs/relocation.c when mounting a crafted Btrfs image. The issue is triggered by removing reloc rb_trees when reloc control has not been initialized, leading to potential denia...

7.1CVSS5.8AI score0.02691EPSS
Save
CVE
CVE
added 2018/11/01 2:00 p.m.192 views

CVE-2018-14660

CVE-2018-14660 : A flaw in GlusterFS server (versions up to 4.1.4 and 3.1.2) lets a remote, authenticated attacker repeatedly call setxattr on GF_META_LOCK_KEY to create multiple locks for a single inode, leading to memory exhaustion on the GlusterFS server node. Connected documents confirm Glust...

6.5CVSS7AI score0.02515EPSS
Save
CVE
CVE
added 2018/06/11 9:00 p.m.192 views

CVE-2018-5129

The CVE-2018-5129 entry relates to a memory-safety/IPC validation issue where a lack of parameter validation on IPC messages can cause an out-of-bounds write, potentially enabling sandbox escape. Affected products include Mozilla Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox

8.6CVSS9.2AI score0.03006EPSS
Save
CVE
CVE
added 2018/02/06 10:00 p.m.192 views

CVE-2018-6767

CVE-2018-6767 affects WavPack 5.1.0, with a stack-based buffer over-read in ParseRiffHeaderConfig (cli/riff.c) that can cause denial of service via crafted RF64 files; related issues in ParseDsdiffHeaderConfig and ParseCaffHeaderConfig can lead to heap/global over-reads or memory corruption in va...

7.8CVSS6.8AI score0.02896EPSS
Save
CVE
CVE
added 2019/05/20 4:33 p.m.192 views

CVE-2019-12221

The CVE-2019-12221 entry corresponds to a NULL/SEGV issue in SDL_free_REAL inside SDL with SDL2_image 2.0.4 (SDL 2.0.9) when used together, as described in the initial document. Connected documents confirm this vulnerability is addressed by SDL2_image updates to 2.0.5 (and corresponding SDL relea...

6.5CVSS7.1AI score0.01969EPSS
Save
CVE
CVE
added 2019/12/10 9:01 p.m.192 views

CVE-2019-13755

CVE-2019-13755 : Google Chrome prior to 79.0.3945.79 suffers from insufficient policy enforcement in extensions, allowing a remote attacker to disable extensions via a crafted HTML page. Connected sources confirm this is a Chrome-extension policy issue, with public fixes in 79.0.3945.79 and later...

4.3CVSS4.9AI score0.01217EPSS
Save
CVE
CVE
added 2019/12/30 11:56 p.m.192 views

CVE-2019-20162

GPAC CVE-2019-20162 affects GPAC 0.8.0 and 0.9.0-development-20191109. The vulnerability is a heap-based buffer overflow in gf_isom_box_parse_ex() (isomedia/box_funcs.c). The provided documents do not specify exploit details, impacted platforms beyond GPAC versions, potential impact (beyond gener...

5.5CVSS6AI score0.00896EPSS
Save
CVE
CVE
added 2020/06/11 2:43 p.m.192 views

CVE-2020-0182

CVE-2020-0182 affects libexif, where exif_entry_get_value may perform an out-of-bounds read due to a missing bounds check, enabling local information disclosure without extra privileges. The published advisories and vendor bulletins (e.g., Red Hat RHSA-2020:4040; Debian DLA-2249-1; ALAS2-2020-152...

6.5CVSS6.5AI score0.01106EPSS
Save
CVE
CVE
added 2020/03/27 6:48 p.m.192 views

CVE-2020-10955

GitLab CE/EE 11.1–12.9 is affected by a parameter-tampering flaw in an upload feature that allows an unauthorized user to read content from certain folders. root cause: input validation flaw enabling access to restricted content. Impact: information disclosure. Remediation: upgrade to patched rel...

6.5CVSS6.3AI score0.01032EPSS
Save
CVE
CVE
added 2020/08/13 2:07 a.m.192 views

CVE-2020-16287

Ghostscript v9.50 is affected by a buffer overflow in lprn_is_black() (contrib/lips4/gdevlprn.c) that could allow a remote attacker to cause a denial of service via a crafted PDF. The issue is fixed in Ghostscript v9.51. Suggested action: upgrade to 9.51 or later. CVSS data present in the provide...

5.5CVSS5.9AI score0.0187EPSS
Save
CVE
CVE
added 2020/08/13 2:09 a.m.192 views

CVE-2020-16307

Ghostscript (Artifex) vulnerable in version 9.50 due to a null pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c, which could allow a remote attacker to cause a denial of service via a crafted PostScript file. The issue is mitigated by upgrading to version 9.51 (as reported by CVE...

5.5CVSS5.7AI score0.01775EPSS
Save
CVE
CVE
added 2020/10/31 12:59 a.m.192 views

CVE-2020-28034

WordPress CVE-2020-28034: A cross-site scripting (XSS) flaw exists in WordPress before 5.5.2 via global variables. The vulnerability affects WordPress core components exposed to user input; exploitation details and exploitability are not provided in the available documents. The fix is addressed i...

6.1CVSS7.2AI score0.01721EPSS
Save
CVE
CVE
added 2020/10/31 12:58 a.m.192 views

CVE-2020-28039

CVE-2020-28039 affects WordPress core, specifically is_protected_meta in wp-includes/meta.php. WordPress versions prior to 5.5.2 are vulnerable due to an incorrect determination of whether a meta key is protected, which allows arbitrary file deletion. The issue is addressed in WordPress 5.5.2 (se...

9.1CVSS9.2AI score0.04108EPSS
Save
CVE
CVE
added 2020/02/11 2:42 p.m.192 views

CVE-2020-6402

CVE-2020-6402 affects Google Chrome on macOS (OS X) prior to 80.0.3987.87, where Insufficient policy enforcement in downloads could let a user who installed a crafted Chrome Extension execute arbitrary code. The root cause is a policy enforcement flaw in the Downloads component, enabling code exe...

8.8CVSS8.4AI score0.02662EPSS
Save
CVE
CVE
added 2020/01/21 8:03 p.m.192 views

CVE-2020-7040

CVE-2020-7040 affects the StoreBackup tool (storeBackup.pl) up to version 3.5, where it relies on the /tmp/storeBackup.lock path. This allows local attackers to perform a symlink attack or create a plain file named /tmp/storeBackup.lock to block usage, potentially leading to privilege escalation ...

9.3CVSS7.8AI score0.02868EPSS
Save
CVE
CVE
added 2022/04/05 1:46 a.m.192 views

CVE-2021-43008

The CVE-2021-43008 vulnerability affects Adminer ≤ 4.6.2, where improper access control allows an attacker-controlled remote MySQL server to trigger Adminer to read a local file via LOAD DATA LOCAL INFILE, exposing sensitive files (e.g., /etc/passwd). The issue can enable Arbitrary File Read on t...

7.5CVSS7.2AI score0.13641EPSS
SaveWeb
CVE
CVE
added 2022/03/11 12:00 a.m.192 views

CVE-2022-0907

The CVE-2022-0907 entry concerns LibTIFF (libtiff) 4.3.0, where tiffcrop may dereference a NULL pointer due to an unchecked return value, enabling denial of service via a crafted TIFF file. The issue is rooted in a NULL pointer dereference in tiffcrop (and related paths handling TIFF data). For u...

5.5CVSS5.7AI score0.0127EPSS
Save
CVE
CVE
added 2022/05/19 12:00 a.m.192 views

CVE-2022-1785

CVE-2022-1785 is a Vim/Vi Improved (vim/vim) vulnerability described as an Out-of-bounds Write in vim/vim prior to 8.2.4977. Connected sources (ALMA/ALAS advisories) confirm the issue and list CVE-2022-1785 among fixed bulletins; remediation is to upgrade Vim to a version that contains the patch ...

7.8CVSS7.6AI score0.00494EPSS
Save
CVE
CVE
added 2022/07/01 7:10 p.m.192 views

CVE-2022-32087

CVE-2022-32087 affects MariaDB Server in versions 10.2 through 10.7, where processing of certain SQL statements can trigger a segmentation fault in Item_args::walk_args. The connected advisories (ALAS2023-037, ALAS2MARIADB10.5-2023-003, Debian DLA-3114-1, Debian/Red Hat trackers) confirm this as ...

7.5CVSS7.2AI score0.01792EPSS
Save
CVE
CVE
added 2023/02/20 12:00 a.m.192 views

CVE-2022-48337

CVE-2022-48337 affects GNU Emacs up to 28.2. The issue arises from the etags implementation in lib-src/etags.c, which uses the system C library function and does not sanitize input, enabling command execution via shell metacharacters in source-file names (for example, using etags -u * in a direct...

9.8CVSS9.5AI score0.01617EPSS
Save
CVE
CVE
added 2023/04/04 9:39 p.m.192 views

CVE-2023-1814

CVE-2023-1814 affects Google Chrome/Chromium: insufficient validation of untrusted input in Safe Browsing allows bypassing download checking via a crafted HTML page. Public advisories note this as a Chrome/Chromium vulnerability; fixes were released in Chrome/Chromium 112.0.5615.49 (and related p...

6.5CVSS6.3AI score0.00889EPSS
Save
CVE
CVE
added 2023/05/26 12:00 a.m.192 views

CVE-2023-2858

The CVE-2023-2858 issue is a NetScaler file parser crash in Wireshark, reported for Wireshark versions 4.0.0–4.0.5 and 3.6.0–3.6.13, allowing a denial-of-service via crafted capture files. Connected advisories confirm the root cause is a parser crash in the NetScaler file parser within Wireshark....

6.5CVSS6.2AI score0.01787EPSS
Save
CVE
CVE
added 2023/06/13 5:51 p.m.192 views

CVE-2023-3216

CVE-2023-3216: Type confusion in V8/Chromium’s JavaScript engine causes heap corruption via a crafted HTML page, affecting Google Chrome pre-114.0.5735.133. The issue is documented across multiple feeds (Chromium/V8 type confusion with high impact). Affected software is Google Chrome/Chromium bro...

8.8CVSS8.4AI score0.00938EPSS
Save
CVE
CVE
added 2023/08/15 5:07 p.m.192 views

CVE-2023-4368

CVE-2023-4368 : In Google Chrome/Chromium, insufficient policy enforcement in the Extensions API prior to 116.0.5845.96 allowed a user-wacched to install a malicious extension to bypass an enterprise policy via a crafted HTML page. The issue is described as a Medium severity in the Chromium advis...

8.8CVSS7.8AI score0.00688EPSS
Save
CVE
CVE
added 2023/12/19 1:38 p.m.192 views

CVE-2023-6861

The CVE-2023-6861 issue is a heap buffer overflow in nsWindow::PickerOpen(void) when Firefox/Thunderbird run in headless mode. Affected products: Firefox ESR <115.6, Thunderbird <115.6, and Firefox

8.8CVSS8.4AI score0.01411EPSS
Save
Total number of security vulnerabilities10003