VYPR
← Debian

Vendor CVEs

Debian

All CVEs

10,437 total · sorted by risk
  • CVE-2015-1246Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

  • CVE-2015-1245Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly…

  • CVE-2015-1244Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by…

  • CVE-2015-1242Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.03

    The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that…

  • CVE-2015-1241Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

  • CVE-2015-1240Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.

  • CVE-2015-1238Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.

  • CVE-2015-1237Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger…

  • CVE-2015-1236Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio…

  • CVE-2015-1235Apr 19, 2015
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.

  • CVE-2015-2575Apr 16, 2015
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

  • CVE-2015-2573Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

  • CVE-2015-2571Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

  • CVE-2015-0505Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

  • CVE-2015-0499Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.

  • CVE-2015-0441Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.

  • CVE-2015-0433Apr 16, 2015
    MariaDB
    MariaDB
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.

  • CVE-2015-1822Apr 16, 2015
    Chrony
    Chrony
    risk 0.00cvss —epss 0.03

    chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code…

  • CVE-2015-1821Apr 16, 2015
    Chrony
    Chrony
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibly execute arbitrary code by configuring the (1) NTP or (2) cmdmon access with a subnet size that is indivisible by four and an address with…

  • CVE-2013-7439Apr 16, 2015
    Xorg
    X11
    risk 0.00cvss —epss 0.04

    Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.

  • CVE-2015-2788Apr 14, 2015
    DBD Firebird
    DBD-Firebird
    risk 0.00cvss —epss 0.04

    Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.

  • CVE-2015-0840Apr 13, 2015
    Debian
    Dpkg
    risk 0.00cvss —epss 0.02

    The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).

  • CVE-2015-2782Apr 8, 2015
    Open-source ARJ archiver
    Open-source ARJ archiver
    risk 0.00cvss —epss 0.06

    Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

  • CVE-2015-2756Apr 1, 2015
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow local HVM guest users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express…

  • CVE-2014-9713Apr 1, 2015
    OpenLDAP
    Openldap
    risk 0.00cvss —epss 0.02

    The default slapd configuration in the Debian openldap package 2.4.23-3 through 2.4.39-1.1 allows remote authenticated users to modify the user's permissions and other user attributes via unspecified vectors.

  • CVE-2015-2776Mar 31, 2015
    Gaia Gis
    Freexl
    risk 0.00cvss —epss 0.02

    The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook.

  • CVE-2015-2754Mar 31, 2015
    Gaia Gis
    Freexl
    risk 0.00cvss —epss 0.03

    FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."

  • CVE-2015-2753Mar 31, 2015
    Gaia Gis
    Freexl
    risk 0.00cvss —epss 0.03

    FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook.

  • CVE-2015-2684Mar 31, 2015
    Internet2
    Service Provider
    risk 0.00cvss —epss 0.02

    Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

  • CVE-2015-0838Mar 31, 2015
    Dulwich Project
    Dulwich
    risk 0.00cvss —epss 0.03

    Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

  • CVE-2014-9706Mar 31, 2015
    Dulwich Project
    Dulwich
    risk 0.00cvss —epss 0.05

    The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

  • CVE-2014-2830Mar 31, 2015
    Debian
    Cifs Utils
    risk 0.00cvss —epss 0.06

    Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.

  • CVE-2014-9709Mar 30, 2015
    PHP
    PHP
    risk 0.00cvss —epss 0.15

    The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the…

  • CVE-2014-9653Mar 30, 2015
    PHP
    PHP
    risk 0.00cvss —epss 0.05

    readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service…

  • CVE-2015-2157Mar 27, 2015
    Putty
    Putty
    risk 0.00cvss —epss 0.01

    The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.

  • CVE-2015-2559Mar 25, 2015
    Drupal
    Drupal
    risk 0.00cvss —epss 0.02

    Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.

  • CVE-2015-2317Mar 25, 2015
    Djangoproject
    Django
    risk 0.00cvss —epss 0.05

    The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as…

  • CVE-2015-0252Mar 24, 2015
    Apache
    Xerces C\+\+
    risk 0.00cvss —epss 0.40

    internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.

  • CVE-2015-1803Mar 20, 2015
    Xorg
    Libxfont
    risk 0.00cvss —epss 0.05

    The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and…

  • CVE-2015-1421Mar 16, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.10

    Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision…

  • CVE-2015-1420Mar 16, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the…

  • CVE-2014-8159Mar 16, 2015
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and…

  • CVE-2015-1782Mar 13, 2015
    Libssh2
    Libssh2
    risk 0.00cvss —epss 0.04

    The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.

  • CVE-2015-2151Mar 12, 2015
    Xen
    Xen
    risk 0.00cvss —epss 0.01

    The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via…

  • CVE-2015-2045Mar 12, 2015
    Xen
    Xen
    risk 0.00cvss —epss 0.00

    The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors.

  • CVE-2015-1165Mar 9, 2015
    Bestpractical
    Request Tracker
    risk 0.00cvss —epss 0.02

    RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.

  • CVE-2014-9472Mar 9, 2015
    Bestpractical
    Request Tracker
    risk 0.00cvss —epss 0.03

    The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.

  • CVE-2015-2191Mar 8, 2015
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.04

    Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

  • CVE-2015-2189Mar 8, 2015
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.05

    Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface…

  • CVE-2015-2188Mar 8, 2015
    Wireshark
    Wireshark
    risk 0.00cvss —epss 0.04

    epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet…

Page 191 of 209