Openpkg vulnerabilities

Products

• Openpkg 27

Newest

• larry wall perl, mandrakesoft mandrake multi network firewall, openpkg +1 more +3 more Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in... CVE-2007-5116 Fix available 7.5 HighNovember 6, 2007
• cvs, freebsd, gentoo linux +3 more +5 more Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16... CVE-2004-1471 Public exploitFix available 7.1 HighDecember 31, 2004
• php, openpkg, trustix secure linux +1 more +3 more Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2... CVE-2004-1065 Fix available EPSS 10.0% 10.0 HighDecember 22, 2004
• php, openpkg, trustix secure linux +1 more +3 more The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to... CVE-2004-1019 Fix available 10.0 HighDecember 22, 2004
• carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus... CVE-2004-1011 10.0 HighDecember 1, 2004
• carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote... CVE-2004-1013 Fix available 10.0 HighNovember 25, 2004
• carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote... CVE-2004-1012 Fix available 10.0 HighNovember 25, 2004
• gd graphics library gdlib, gentoo linux, openpkg +1 more +3 more Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions,... CVE-2004-0990 Public exploitFix available EPSS 28.3% 10.0 HighOctober 28, 2004
• apache http server, hp hp-ux, openpkg +2 more +4 more Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local... CVE-2004-0940 Public exploitFix available 7.8 HighOctober 26, 2004
• oracle mysql, openpkg, redhat enterprise linux +3 more +5 more Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a... CVE-2004-0957 Fix available 6.8 MediumOctober 21, 2004
• squid, gentoo linux, openpkg +2 more +4 more The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4... CVE-2004-0918 Fix available EPSS 15.8% 5.0 MediumOctober 21, 2004
• cyrus sasl, apple mac os x, mac os x server +4 more +6 more Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in... CVE-2005-0373 Fix available 7.5 HighOctober 7, 2004
• mit kerberos 5, debian linux, openpkg +2 more Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and... CVE-2004-0772 Fix available 9.8 CriticalAugust 31, 2004
• php, avaya converged communications server, debian linux +3 more +5 more The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain... CVE-2004-0594 Public exploitFix available EPSS 54.9% 5.1 MediumJuly 16, 2004
• subversion, openpkg +1 more libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3)... CVE-2004-0413 Fix available 10.0 HighJune 23, 2004
• cvs, gentoo linux, openbsd +2 more +4 more serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle... CVE-2004-0418 Fix available 10.0 HighJune 11, 2004
• cvs, gentoo linux, openbsd +2 more +4 more Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x... CVE-2004-0417 Fix available 5.0 MediumJune 11, 2004
• cvs, gentoo linux, openbsd +2 more +4 more Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x... CVE-2004-0416 Public exploitFix available EPSS 13.2% 10.0 HighJune 11, 2004
• cvs, gentoo linux, openbsd +2 more +4 more CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry"... CVE-2004-0414 Fix available 10.0 HighJune 10, 2004
• kolab groupware server, openpkg +1 more Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world... CVE-2004-1997 4.6 MediumMay 5, 2004
• libpng, openpkg, redhat enterprise linux +2 more +4 more The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a... CVE-2004-0421 Fix available 5.0 MediumApril 30, 2004
• uudeview, winzip, gentoo linux +1 more +3 more Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and... CVE-2004-0333 Public exploitFix available EPSS 24.2% 10.0 HighMarch 18, 2004
• cgi.pm, debian linux, openpkg +2 more Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to... CVE-2003-0615 Fix available 4.3 MediumAugust 1, 2003
• openbsd openssh, openpkg, siemens scalance x204rna ecc firmware +1 more +3 more OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an... CVE-2003-0190 Public exploitFix available EPSS 76.8% 5.0 MediumMay 2, 2003
• openssl, openpkg, stunnel +2 more OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain... CVE-2003-0147 Fix available 5.0 MediumMarch 18, 2003
• php, openpkg +1 more Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to... CVE-2002-0985 Fix available 7.5 HighSeptember 18, 2002
• openbsd openssh, conectiva linux, engardelinux secure linux +5 more +7 more Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote... CVE-2002-0083 Public exploit EPSS 14.7% 9.8 CriticalMarch 15, 2002