Skip to contentGentoo vulnerabilities
Newest
- gentoo linuxdispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files...CVE-2004-11072.1 Low
- gallery project gallery, gentoo linux +1 moreCross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers...CVE-2004-1106Fix available6.8 Medium
- broadcom brightstor arcserve backup, etrust antivirus, etrust antivirus gateway +15 more +17 moreArchive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows...CVE-2004-1096Public exploitFix availableEPSS 18.5%7.5 High
- cscope, debian linux, sco unixware +2 moremain.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows...CVE-2004-0996Public exploitFix available2.1 Low
- phpmyadmin, gentoo linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow...CVE-2004-1055Fix available6.8 Medium
- thibault godouet fcron, gentoo linux +1 moreFcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which...CVE-2004-10332.1 Low
- thibault godouet fcron, gentoo linux +1 morefcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete...CVE-2004-10322.1 Low
- thibault godouet fcron, gentoo linux +1 morefcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass...CVE-2004-10317.2 High
- thibault godouet fcron, gentoo linux +1 morefcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain...CVE-2004-10302.1 Low
- sun jre, conectiva linux, hp hp-ux +4 more +6 moreThe Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and...CVE-2004-1029Public exploitEPSS 17.0%9.3 High
- arj software inc. unarj, gentoo linux +1 moreBuffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an...CVE-2004-094710.0 High
- twiki, gentoo linux +1 moreThe search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via...CVE-2004-1037Public exploitEPSS 61.7%10.0 High
- kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 moreSophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0,...CVE-2004-0937Public exploitEPSS 14.9%7.5 High
- archive zip zip, broadcom brightstor arcserve backup, etrust antivirus +16 more +18 moreRAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with...CVE-2004-0936Public exploitEPSS 14.9%7.5 High
- kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 moreEset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus...CVE-2004-0935Public exploitEPSS 15.5%7.5 High
- archive zip zip, broadcom brightstor arcserve backup, etrust antivirus +16 more +18 moreKaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file...CVE-2004-0934Public exploitEPSS 14.9%7.5 High
- broadcom etrust antivirus, etrust intrusion detection, etrust secure content manager +16 more +18 moreComputer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus...CVE-2004-0933Public exploitEPSS 20.9%7.5 High
- kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 moreMcAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver...CVE-2004-0932Public exploitEPSS 63.6%7.5 High
- samba, conectiva linux, redhat enterprise linux +3 more +5 moreThe ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote...CVE-2004-0930Fix available5.0 Medium
- subversion, gentoo linux +1 moreThe mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all...CVE-2004-0749Fix available5.0 Medium
- bnc, debian linux +1 moreBuffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows...CVE-2004-1052Fix available10.0 High
- squirrelmail, gentoo linux +1 moreCross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in...CVE-2004-1036Fix available6.8 Medium
- xine gxine, gentoo linux, kaffeine player +2 moreBuffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in...CVE-2004-1034Fix available10.0 High
- arjsoftware unarj, debian linux +1 moreDirectory traversal vulnerability in the -x (extract) command line option in unarj allows remote...CVE-2004-10275.0 Medium
- imagemagick, debian linux +1 moreBuffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers...CVE-2004-0981Fix available10.0 High
- angus mackay ez-ipupdate, debian linux +1 moreFormat string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when...CVE-2004-0980Fix available10.0 High
- yukihiro matsumoto ruby, gentoo linux, mandrakesoft mandrake linux +1 more +3 moreThe CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a...CVE-2004-0983Fix available5.0 Medium
- gd graphics library gdlib, gentoo linux, openpkg +1 more +3 moreInteger overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions,...CVE-2004-0990Public exploitFix availableEPSS 28.3%10.0 High
- easy software products cups, xpdf, debian linux +10 more +12 moreMultiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow...CVE-2004-0889Fix available10.0 High
- squid, gentoo linux, openpkg +2 more +4 moreThe asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4...CVE-2004-0918Fix availableEPSS 15.8%5.0 Medium
- rob flynn gaim, gentoo linux +1 moreBuffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to...CVE-2004-089110.0 High
- easy software products cups, gnome gpdf, kde +10 more +12 moreMultiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as...CVE-2004-0888Fix available10.0 High
- gentoo linux, openssl, mandrakesoft mandrake linux +2 more +4 moreThe der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...CVE-2004-0975Fix available2.1 Low
- gentoo linux, lvm logical volume management utilities +1 moreThe lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and...CVE-2004-0972Fix available2.1 Low
- gentoo linux, gnu groff +1 moreThe groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux...CVE-2004-0969Fix available2.1 Low
- speedtouch usb driver, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreFormat string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute...CVE-2004-08347.2 High
- getmail, gentoo linux +1 moregetmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users...CVE-2004-08812.1 Low
- getmail, gentoo linux +1 moregetmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a...CVE-2004-08801.2 Low
- apache http server, debian linux, hp hp-ux +8 more +10 moreThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...CVE-2004-0809Fix availableEPSS 17.2%5.0 Medium
- kde, kde konqueror, gentoo linux +1 more +3 moreKonqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level...CVE-2004-07467.5 High
- rob flynn gaim, gentoo linux, mandrakesoft mandrake linux +2 moreBuffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82...CVE-2004-05007.5 High
- the cacti group cacti, gentoo linux +1 moreSQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute...CVE-2004-1737Public exploitFix available7.5 High
- sox, conectiva linux, redhat enterprise linux +2 more +4 moreMultiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17...CVE-2004-0557Public exploitFix availableEPSS 25.1%10.0 High
- mod ssl ssl, gentoo linux +1 moreFormat string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in...CVE-2004-07007.5 High
- rsbac rule set based access control, gentoo linux +1 moreRule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open,...CVE-2004-06677.2 High
- l2tpd, gentoo linux +1 moreBuffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute...CVE-2004-0649Fix available10.0 High
- ethereal group ethereal, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of...CVE-2004-0635Fix available5.0 Medium
- ethereal group ethereal, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a...CVE-2004-06345.0 Medium
- ethereal group ethereal, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial...CVE-2004-0633Public exploitEPSS 18.0%5.0 Medium
- gentoo linux, linux kernel, mandrakesoft mandrake linux +3 more +5 moreFloating point information leak in the context switch code for Linux 2.4.x only checks the MFH...CVE-2004-05652.1 Low
- Show moreLoading…