Skip to contentDebian Linux vulnerabilities
- phpbb, debian linux, phpbb3 +2 morephpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag.CVE-2011-05446.1 Medium
- edgewall trac, debian linux +1 moreTrac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be...CVE-2010-5108Fix available7.5 High
- pithos, debian linux +1 morepithos before 0.3.5 allows overwrite of arbitrary files via symlinks.CVE-2010-4817Fix available5.5 Medium
- consolekit, debian linux, redhat enterprise linux +2 moreIn ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw...CVE-2010-46648.8 High
- debian linux, storaged-project udisks, fedoraproject fedora +2 more +4 moreudisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.CVE-2010-46617.8 High
- php, php5, debian linux +1 more +3 morePHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which...CVE-2010-46577.5 High
- freedesktop poppler, debian linux +1 morepoppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.CVE-2010-4654Fix available7.8 High
- freedesktop poppler, debian linux +1 moreAn integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.CVE-2010-4653Fix available6.5 Medium
- offlineimap, debian linux +1 moreofflineimap before 6.3.4 added support for SSL server certificate validation but it is still...CVE-2010-45339.8 Critical
- offlineimap, debian linux +1 moreofflineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes"...CVE-2010-45325.9 Medium
- letodms, debian linux +1 moreletodms 3.3.6 has CSRF via change passwordCVE-2012-4385Public exploit6.5 Medium
- letodms, debian linux +1 moreletodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User...CVE-2012-4384Public exploit6.1 Medium
- ettercap, debian linux +1 moreAn unchecked sscanf() call in ettercap 0.7.3 allows an insecure temporary settings file to...CVE-2010-3844Fix available8.8 High
- babiloo, debian linux +1 morebabiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and...CVE-2010-34405.5 Medium
- rails, debian linux +1 moreThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.CVE-2010-32996.5 Medium
- alien-arena, debian linux, fedoraproject fedora +2 moreIt is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by...CVE-2010-3439Fix available6.5 Medium
- libpoe-component-irc-perl, debian linux, fedoraproject fedora +2 morelibpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can...CVE-2010-3438Fix available9.8 Critical
- gargoyle project gargoyle, debian linux +1 moreIf LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to...CVE-2010-3359Fix available4.8 Medium
- keystone, debian linux +1 moreOpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack spaceCVE-2012-1572Fix available7.5 High
- atop, debian linux +1 moreatop: symlink attack possible due to insecure tempfile handlingCVE-2011-3618Fix available7.8 High
- json-jwt project json-jwt, debian linux +1 moreJSON-jwt Gem lacked element count during splitting of JWE stringCVE-2019-18848Fix available7.5 High
- gdk-pixbuf, debian linux, redhat enterprise linux +2 moregdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables...CVE-2011-28979.8 Critical
- debian linux, intel xeon 3104 firmware, xeon 3106 firmware +56 more +58 moreImproper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable...CVE-2019-11139Fix available6.0 Medium
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- tnef project tnef, canonical ubuntu linux, debian linux +1 more +3 moreIn tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file...CVE-2019-18849Fix available5.5 Medium
- liboping, debian linux +1 moreliboping 1.3.2 allows users reading arbitrary files upon the local system.CVE-2009-3614Fix available3.3 Low
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreA flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission...CVE-2019-14824Fix available6.5 Medium
- gri project gri, debian linux +1 moregri before 2.12.18 generates temporary files in an insecure way.CVE-2008-7291Fix available9.8 Critical
- gambas project gambas, debian linux, gambas3 +2 moreGambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform...CVE-2013-1809Fix available7.5 High
- cisco clamav, debian linux +1 moreclamav 0.91.2 suffers from a floating point exception when using ScanOLE2.CVE-2007-6745Fix available9.8 Critical
- viewvc, debian linux +1 moreviewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden"...CVE-2007-57437.5 High
- debian lintian, canonical ubuntu linux, debian linux +2 moreLintian before 2.5.12 allows remote attackers to gather information about the "host" system using...CVE-2013-1429Fix available6.3 Medium
- ldap-git-backup, debian linux, ldap git backup project git backup +2 moreldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.CVE-2013-1425Fix available5.5 Medium
- debian linux, shibboleth service provider +1 moreThe keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses...CVE-2010-24507.5 High
- tahoe-lafs, debian linux +1 moreTahoe-LAFS fails to ensure integrityCVE-2012-00517.4 High
- gnu fribidi, debian linux +1 moreA buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of...CVE-2019-18397Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in...CVE-2019-18809Fix available4.6 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at...CVE-2019-18804Fix available7.5 High
- eclipse jetty, debian linux +1 moreJSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.CVE-2009-50466.1 Medium
- eclipse jetty, debian linux +1 moreDump Servlet information leak in jetty before 6.1.22.CVE-2009-50457.5 High
- mortbay jetty, debian linux +1 moreWebApp JSP Snoop page XSS in jetty though 6.1.21.CVE-2009-50496.1 Medium
- archivemail, debian linux +1 morearchivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.CVE-2006-4245Fix available8.1 High
- simplesamlphp, xmlseclibs project xmlseclibs, debian linux +2 moreSignature validation bypass in XmlSecLibsCVE-2019-3465Fix available8.8 High
- mesa3d mesa, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D...CVE-2019-5068Fix available5.1 Medium
- horde groupware, debian linux +1 moreMultiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.CVE-2013-6275Public exploitFix available6.5 Medium
- nokogiri, ruby nokogiri gem, debian linux +5 more +7 moreNokogiri vulnerable to DoS while parsing XML entitiesCVE-2013-6461Fix available6.5 Medium
- nokogiri, ruby nokogiri gem, debian linux +5 more +7 moreNokogiri vulnerable to DoS while parsing XML documentsCVE-2013-6460Fix available6.5 Medium
- horde groupware, debian linux, opensuse +2 moreHorde Groupware Web mail 5.1.2 has CSRF with requests to change permissionsCVE-2013-6365Fix available5.3 Medium
- horde groupware, debian linux +1 moreHorde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address bookCVE-2013-6364Public exploitFix available8.8 High
- Show moreLoading…