Browse CVEs

HIGH 7.5 CVE-2013-2600 MiniUPnPd has information disclosure use of snprintf() Debian Linux No fix yet Fix from $1,9502019-11-01 CRITICAL 9.8 CVE-2013-1910 yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Tro… Debian Linux Mitigation only Fix from $2,3002019-10-31 CRITICAL 9.8 CVE-2009-5043 burn allows file names to escape via mishandled quotation marks Debian Linux No fix yet Fix from $2,3002019-10-31 CRITICAL 9.1 CVE-2009-5042 python-docutils allows insecure usage of temporary files Debian Linux Mitigation only Fix from $2,3002019-10-31 HIGH 7.5 CVE-2011-4931 gpw generates shorter passwords than required Debian Linux No fix yet Fix from $1,9502019-10-29 MEDIUM 5.5 CVE-2010-3373 paxtest handles temporary files insecurely Debian Linux No fix yet Fix from $1,6002019-10-29 MEDIUM 6.5 CVE-2019-17402 Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in cr… Debian Linux Mitigation only Fix from $1,6002019-10-09 MEDIUM 6.5 CVE-2018-21015 AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applicat… Debian Linux No fix yet Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2018-21016 audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-re… Debian Linux No fix yet Fix from $1,6002019-09-16 MEDIUM 5.5 CVE-2019-15143 In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_r… Debian Linux No fix yet Fix from $1,6002019-08-18 MEDIUM 6.5 CVE-2019-14442 In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. … Debian Linux No fix yet Fix from $1,6002019-07-30 MEDIUM 6.5 CVE-2019-14443 An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of … Debian Linux No fix yet Fix from $1,6002019-07-30 MEDIUM 6.5 CVE-2019-14370 In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service. Debian Linux No fix yet Fix from $1,6002019-07-28 MEDIUM 6.5 CVE-2019-14369 Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a … Debian Linux No fix yet Fix from $1,6002019-07-28 MEDIUM 5.5 CVE-2019-14275 Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. Debian Linux No fix yet Fix from $1,6002019-07-26 MEDIUM 5.5 CVE-2019-1010069 moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted f… Debian Linux No fix yet Fix from $1,6002019-07-18 HIGH 8.1 CVE-2019-13616 SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called f… Debian Linux No fix yet Fix from $1,9502019-07-16 HIGH 7.8 CVE-2019-0053 Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exp… Debian Linux No fix yet Fix from $1,9502019-07-11 HIGH 8.8 CVE-2019-5051 An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead… Debian Linux No fix yet Fix from $1,9502019-07-03 HIGH 8.8 CVE-2019-5052 An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted file can cause an integer overf… Debian Linux No fix yet Fix from $1,9502019-07-03 CRITICAL 9.8 CVE-2019-7165 A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code. Debian Linux No fix yet Fix from $2,3002019-07-03 CRITICAL 9.8 CVE-2019-12594EPSS 7% DOSBox 0.74-2 has Incorrect Access Control. Debian Linux No fix yet Fix from $2,3002019-07-02 MEDIUM 6.5 CVE-2019-13147 In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows… Debian Linux No fix yet Fix from $1,6002019-07-02 MEDIUM 5.5 CVE-2019-2101 In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local infor… Debian Linux No fix yet Fix from $1,6002019-06-07 HIGH 8.8 CVE-2019-9858EPSS 19% Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image… Debian Linux No fix yet Fix from $1,9502019-05-29 CRITICAL 9.8 CVE-2019-12046 LemonLDAP::NG -2.0.3 has Incorrect Access Control. Debian Linux No fix yet Fix from $2,3002019-05-22 HIGH 7.8 CVE-2019-11221 GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c. Debian Linux No fix yet Fix from $1,9502019-04-15 MEDIUM 6.1 CVE-2019-10904 Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors. Debian Linux No fix yet Fix from $1,6002019-04-06 HIGH 7.5 CVE-2018-10242 Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the alloca… Debian Linux Mitigation only Fix from $1,9502019-04-04 MEDIUM 5.5 CVE-2019-10018 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. Debian Linux No fix yet Fix from $1,6002019-03-25