Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Debian Linux
MEDIUM 6.5
Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice. …
Debian Linux
MEDIUM 5.3
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookie…
Debian Linux
MEDIUM 5.5
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivil…
Debian Linux
HIGH 7.7
Guzzle, an extensible PHP HTTP client. `Authorization` headers on requests are sensitive information. In affected versions when using our Curl handle…
Debian Linux
HIGH 7.7
Guzzle, an extensible PHP HTTP client. `Authorization` and `Cookie` headers on requests are sensitive information. In affected versions on making a r…
Debian Linux
MEDIUM 5.3
SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects.
Debian Linux
HIGH 7.5
containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.1…
Debian Linux
MEDIUM 6.5
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.
Debian Linux
HIGH 7.5
twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following…
Debian Linux
MEDIUM 6.5
treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq…
Debian Linux
MEDIUM 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affec…
Debian Linux
MEDIUM 6.1
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Debian Linux
MEDIUM 6.5
Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider a…
Debian Linux
MEDIUM 5.5
Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that refer…
Debian Linux
MEDIUM 5.3
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access pro…
Debian Linux
HIGH 7.5
A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. T…
Debian Linux
MEDIUM 5.5
In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like syste…
Debian Linux
MEDIUM 5.5
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
Debian Linux
MEDIUM 5.9
FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages a…
Debian Linux
MEDIUM 5.5
Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the adm…
Debian Linux
MEDIUM 5.5
libuser has information disclosure when moving user's home directory
Debian Linux
HIGH 7.5
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive informatio…
Debian Linux
MEDIUM 5.5
uzbl: Information disclosure via world-readable cookies storage file
Debian Linux
MEDIUM 5.5
surf: cookie jar has read access from other local user
Debian Linux
HIGH 7.5
ClamAV before 0.97.7: dbg_printhex possible information leak
Debian Linux
HIGH 7.5
The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed …
Debian Linux
HIGH 7.5
Dump Servlet information leak in jetty before 6.1.22.
Debian Linux
HIGH 7.5
MiniUPnPd has information disclosure use of snprintf()
Debian Linux
MEDIUM 6.5
An issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. A user logged into OTRS…
Debian Linux
MEDIUM 5.3
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x…