VYPR
← Debian

Vendor CVEs

Debian

All CVEs

10,437 total · sorted by risk
  • CVE-2015-5212Nov 10, 2015
    Apache
    Openoffice
    risk 0.01cvss —epss 0.09

    Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…

  • CVE-2015-4551Nov 10, 2015
    Apache
    Openoffice
    risk 0.01cvss —epss 0.14

    LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which…

  • CVE-2015-7696Nov 6, 2015
    Unzip Project
    Unzip
    risk 0.01cvss —epss 0.07

    Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.

  • CVE-2015-4816Oct 21, 2015
    Fedoraproject
    Fedora
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

  • CVE-2015-5400Sep 28, 2015
    Squid Cache
    Squid
    risk 0.01cvss —epss 0.21

    Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

  • CVE-2015-4473Aug 16, 2015
    Mozilla Corporation
    Firefox
    risk 0.01cvss —epss 0.07

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

  • CVE-2015-1819Aug 14, 2015
    Apple Inc.
    Mac OS X
    risk 0.01cvss —epss 0.06

    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

  • CVE-2015-5165Aug 12, 2015
    Xen
    Xen
    risk 0.01cvss —epss 0.13

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

  • CVE-2015-3225Jul 26, 2015
    Rack
    Rack
    risk 0.01cvss —epss 0.08

    lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.

  • CVE-2015-4757Jul 16, 2015
    MariaDB
    MariaDB
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

  • CVE-2015-3279Jul 14, 2015
    Openprinting
    cups-filters
    risk 0.01cvss —epss 0.07

    Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.

  • CVE-2015-3258Jul 14, 2015
    Openprinting
    cups-filters
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.

  • CVE-2015-3209Jun 15, 2015
    QEMU
    Qemu
    risk 0.01cvss —epss 0.10

    Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

  • CVE-2014-7810Jun 7, 2015
    Apache
    Tomcat
    risk 0.01cvss —epss 0.14

    The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager…

  • CVE-2015-4047May 29, 2015
    Fedoraproject
    Fedora
    risk 0.01cvss —epss 0.10

    racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

  • CVE-2015-3165May 28, 2015
    PostgreSQL
    PostgreSQL
    risk 0.01cvss —epss 0.09

    Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will…

  • CVE-2015-3153May 1, 2015
    Curl
    Curl
    risk 0.01cvss —epss 0.07

    The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

  • CVE-2015-1774Apr 28, 2015
    Apache
    Openoffice
    risk 0.01cvss —epss 0.08

    The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

  • CVE-2015-3148Apr 24, 2015
    Curl
    Curl
    risk 0.01cvss —epss 0.14

    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

  • CVE-2015-2568Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.

  • CVE-2015-0501Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.

  • CVE-2015-2775Apr 13, 2015
    GNU
    Mailman
    risk 0.01cvss —epss 0.08

    Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.

  • CVE-2015-2806Apr 10, 2015
    GNU
    Libtasn1
    risk 0.01cvss —epss 0.08

    Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

  • CVE-2015-2305Mar 30, 2015
    Henry Spencer
    rxspencer
    risk 0.01cvss —epss 0.09

    Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular…

  • CVE-2015-2301Mar 30, 2015
    PHP
    PHP
    risk 0.01cvss —epss 0.15

    Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar…

  • CVE-2015-2155Mar 24, 2015
    Tcpdump
    Tcpdump
    risk 0.01cvss —epss 0.08

    The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

  • CVE-2014-9636Feb 6, 2015
    Unzip Project
    Unzip
    risk 0.01cvss —epss 0.12

    unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.

  • CVE-2014-8158Jan 26, 2015
    Jasper
    JasPer
    risk 0.01cvss —epss 0.14

    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

  • CVE-2014-8157Jan 26, 2015
    Jasper
    JasPer
    risk 0.01cvss —epss 0.17

    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.

  • CVE-2015-0411Jan 21, 2015
    Fedoraproject
    Fedora
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.

  • CVE-2015-0408Jan 21, 2015
    Novell
    Suse Linux Enterprise Desktop
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

  • CVE-2015-0382Jan 21, 2015
    Fedoraproject
    Fedora
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.

  • CVE-2014-6601Jan 21, 2015
    Novell
    Suse Linux Enterprise Desktop
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  • CVE-2014-6568Jan 21, 2015
    Fedoraproject
    Fedora
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.

  • CVE-2014-8145Dec 31, 2014
    Sound Exchange Project
    Sound Exchange
    risk 0.01cvss —epss 0.08

    Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.

  • CVE-2014-9116Dec 2, 2014
    Mutt
    Mutt
    risk 0.01cvss —epss 0.10

    The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the…

  • CVE-2014-9112Dec 2, 2014
    GNU
    Cpio
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.

  • CVE-2014-5461Sep 4, 2014
    Lua
    Lua
    risk 0.01cvss —epss 0.12

    Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

  • CVE-2014-3467Jun 5, 2014
    GNU
    Gnutls
    risk 0.01cvss —epss 0.07

    Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

  • CVE-2014-2421Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2014-0457Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2014-0456Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  • CVE-2014-0429Apr 16, 2014
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2013-6393Feb 6, 2014
    YAML
    Libyaml
    risk 0.01cvss —epss 0.07

    The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a…

  • CVE-2013-4449Feb 5, 2014
    OpenLDAP
    Openldap
    risk 0.01cvss —epss 0.11

    The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a search request, which triggers rwm_conn_destroy to free the session context while…

  • CVE-2013-4559Nov 20, 2013
    Lighttpd
    Lighttpd
    risk 0.01cvss —epss 0.11

    lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function…

  • CVE-2013-6629Nov 19, 2013
    Google
    Chrome
    risk 0.01cvss —epss 0.10

    The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of…

  • CVE-2013-4475Nov 13, 2013
    Samba (software)
    Samba
    risk 0.01cvss —epss 0.09

    Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate…

  • CVE-2013-4243Sep 10, 2013
    LibTIFF
    Libtiff
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.

  • CVE-2013-2070Jul 20, 2013
    Nginx
    Nginx
    risk 0.01cvss —epss 0.12

    http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted…

Page 165 of 209