Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Debian Linux
HIGH 7.5
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.
Debian Linux
CRITICAL 9.8
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API.
Debian Linux
HIGH 7.5
Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have chang…
Debian Linux
MEDIUM 6.1
Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.
Debian Linux
MEDIUM 6.1
Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.
Debian Linux
MEDIUM 5.3
Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.
Debian Linux
MEDIUM 5.3
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading ti…
Debian Linux
MEDIUM 6.1
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* me…
Debian Linux
MEDIUM 6.1
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChang…
Debian Linux
MEDIUM 5.3
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to use Special:ResetTokens. Thi…
Debian Linux
MEDIUM 6.1
Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
Debian Linux
CRITICAL 9.8
Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-…
Debian Linux
CRITICAL 9.8
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update…
Debian Linux
MEDIUM 5.5
An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, …
Debian Linux
MEDIUM 5.3
A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression f…
Debian Linux
MEDIUM 5.5
There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be …
Debian Linux
MEDIUM 5.5
There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processe…
Debian Linux
MEDIUM 5.5
There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processe…
Debian Linux
MEDIUM 5.3
There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer…
Debian Linux
MEDIUM 5.3
A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to Open…
Debian Linux
MEDIUM 5.3
There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHu…
Debian Linux
MEDIUM 5.9
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol serv…
Debian Linux
HIGH 7.5
ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconnecting the victim from an IRC…
Debian Linux
HIGH 7.2
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template fu…
Debian Linux
MEDIUM 5.3
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
Debian Linux
MEDIUM 6.1
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the …
Debian Linux
HIGH 8.6
An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Req…
Debian Linux
HIGH 7.5
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions…
Shadow
HIGH 7.8
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local user…
Courier Authlib
HIGH 7.5
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissio…