Browse CVEs

HIGH 7.0 CVE-2018-12029 A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard pass… Debian Linux 5.3.2+ Fix from $1,9502018-06-17 MEDIUM 5.9 CVE-2018-10850 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a cras… Debian Linux Patch available Fix from $1,6002018-06-13 HIGH 7.8 CVE-2018-8897EPSS 19% A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the developme… Debian Linux 11.1+ Fix from $1,9502018-05-08 HIGH 7.0 CVE-2018-0492 Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation. Debian Linux after 1.3.4 Fix from $1,9502018-04-03 HIGH 7.5 CVE-2017-2619EPSS 11% Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file s… Debian Linux 4.4.12 / 4.5.7+ Fix from $1,9502018-03-12 HIGH 7.5 CVE-2018-7998 In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows r… Debian Linux 8.6.3+ Fix from $1,9502018-03-09 MEDIUM 6.9 CVE-2014-5033 KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypas… Kde4libs after 5.0 Fix from $1,6002014-08-19 MEDIUM 6.9 CVE-2013-4327 systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by lev… Debian Linux after 207 Fix from $1,6002013-10-03 MEDIUM 6.3 CVE-2009-0784 Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel … Debian Linux Patch available Fix from $1,6002009-03-25