Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Debian Linux
MEDIUM 5.5
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading dat…
Debian Linux
MEDIUM 6.5
There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1
Debian Linux
MEDIUM 6.5
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when readi…
Debian Linux
MEDIUM 6.5
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can…
Debian Linux
MEDIUM 6.5
res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows a…
Debian Linux
HIGH 7.5
telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In…
Debian Linux
HIGH 7.5
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collection…
Debian Linux
HIGH 7.8
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Process…
Debian Linux
MEDIUM 5.5
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafte…
Debian Linux
HIGH 7.4
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password co…
Debian Linux
HIGH 7.5
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the…
Debian Linux
MEDIUM 5.5
A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG…
Debian Linux
HIGH 7.8
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exact…
Debian Linux
HIGH 7.8
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
Debian Linux
HIGH 7.5
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all me…
Debian Linux
MEDIUM 6.8
A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify shar…
Debian Linux
MEDIUM 5.5
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivil…
Debian Linux
HIGH 7.1
A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attac…
Debian Linux
MEDIUM 5.5
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable i…
Debian Linux
HIGH 7.5
Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a …
Debian Linux
MEDIUM 6.7
In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation…
Debian Linux
CRITICAL 9.8
Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set.
Debian Linux
CRITICAL 9.8
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiv…
Debian Linux
HIGH 8.1
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading t…
Debian Linux
MEDIUM 5.5
Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.
Debian Linux
HIGH 8.0
Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This th…
Debian Linux
MEDIUM 6.5
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes …
Debian Linux
HIGH 8.8
insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may …
Debian Linux
HIGH 8.8
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a sin…
Debian Linux
HIGH 7.5
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a sin…