Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Debian Linux
CRITICAL 9.8
An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escapi…
Debian Linux
CRITICAL 9.1
An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces s…
Debian Linux
CRITICAL 9.8
PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI…
Debian Linux
CRITICAL 9.8
PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stac…
Debian Linux
CRITICAL 9.1
Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.
Debian Linux
CRITICAL 9.8
In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length …
Debian Linux
CRITICAL 9.8
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by…
Debian Linux
CRITICAL 9.8
Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
Debian Linux
CRITICAL 9.8
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S…
Duck
CRITICAL 9.8
duck before 0.10 did not properly handle loading of untrusted code from the current directory.
Debian Linux
CRITICAL 9.8
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Debian Linux
CRITICAL 9.8
Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copi…
Debian Linux
CRITICAL 9.8
Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is co…
Debian Linux
CRITICAL 9.8
Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is …
Debian Linux
CRITICAL 9.8
Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an o…
Debian Linux
CRITICAL 9.1
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when t…
Debian Linux
CRITICAL 9.8
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a c…
Debian Linux
CRITICAL 9.8
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
Debian Linux
CRITICAL 9.8
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions…
Perm
CRITICAL 9.8
perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)
Debian Linux
CRITICAL 9.8
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injectio…
Debian Linux
CRITICAL 9.1
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the ca…
Debian Linux
CRITICAL 9.1
An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient He…
Debian Linux
CRITICAL 9.1
An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read.
Debian Linux
CRITICAL 9.1
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S…
Debian Linux
CRITICAL 9.1
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S…
Debian Linux
CRITICAL 9.1
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
Debian Linux
CRITICAL 9.8
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
Debian Linux
CRITICAL 9.8
The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create…
Debian Linux
CRITICAL 9.8
Heap-based Buffer Overflow in vim/vim prior to 8.2.