Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Debian Linux
CRITICAL 9.8
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticat…
Debian Linux
CRITICAL 9.1
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
Debian Linux
CRITICAL 9.1
An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet…
Debian Linux
CRITICAL 9.8
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
Debian Linux
CRITICAL 9.8
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.
Debian Linux
CRITICAL 9.8
In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.
Debian Linux
CRITICAL 9.1
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_pr…
Debian Linux
CRITICAL 9.1
In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.
Debian Linux
CRITICAL 9.8
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system
Debian Linux
CRITICAL 9.8
python-requests-Kerberos through 0.5 does not handle mutual authentication
Debian Linux
CRITICAL 9.3
A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied…
Debian Linux
CRITICAL 9.8
sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c.
Debian Linux
CRITICAL 9.8
lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.
Debian Linux
CRITICAL 9.8
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.ph…
Debian Linux
CRITICAL 9.8
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
Debian Linux
CRITICAL 9.8
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
Debian Linux
CRITICAL 9.8
Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured…
Debian Linux
CRITICAL 9.8
Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function.
Debian Linux
CRITICAL 9.8
generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges.
Debian Linux
CRITICAL 9.8
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_s…
Debian Linux
CRITICAL 9.8
An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offse…
Debian Linux
CRITICAL 9.8
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 ses…
Debian Linux
CRITICAL 9.8
ClamAV before 0.97.7 has WWPack corrupt heap memory
Debian Linux
CRITICAL 9.8
ClamAV before 0.97.7 has buffer overflow in the libclamav component
Debian Linux
CRITICAL 9.8
In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker …
Debian Linux
CRITICAL 9.8
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed proto…
Debian Linux
CRITICAL 9.8
libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing…
Debian Linux
CRITICAL 9.8
gri before 2.12.18 generates temporary files in an insecure way.
Debian Linux
CRITICAL 9.8
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
Debian Linux
CRITICAL 9.8
There is a possible heap overflow in libclamav/fsg.c before 0.100.0.