Packages that have open unimportant issues

This page lists packages that are affected by issues that are considered unimportant from a security perspective. These issues are thought to be unexploitable or uneffective in most situations (for example, browser denial-of-services).

PackageBugDescriptionReleases
389-adminCVE-2015-0233Multiple insecure Temporary File vulnerabilities in 389 Administration ...jessie
9baseCVE-2014-1935insecure use of /tmpbullseye, buster, jessie, sid, stretch
abcm2psCVE-2018-10753Stack-based buffer overflow in the delayed_output function in music.c ...jessie, stretch
CVE-2018-10771Stack-based buffer overflow in the get_key function in parse.c in abcm ...jessie, stretch
CVE-2019-1010069moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The ...jessie, stretch
abiwordCVE-2017-17529af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate strings ...bullseye, buster, jessie, sid, stretch
acpica-unixCVE-2017-13693The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils. ...jessie, stretch
CVE-2017-13694The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobje ...jessie, stretch
CVE-2017-13695The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the ...jessie, stretch
activemqCVE-2016-0782The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5 ...jessie
CVE-2016-6810In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scri ...jessie
CVE-2018-8006An instance of a cross-site scripting vulnerability was identified to ...bullseye, buster, jessie, sid, stretch
afflibCVE-2018-8050The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFL ...jessie, stretch
amandaCVE-2016-10729An issue was discovered in Amanda 3.3.1. A user with backup privileges ...bullseye, buster, jessie, sid, stretch
CVE-2016-10730An issue was discovered in Amanda 3.3.1. A user with backup privileges ...bullseye, buster, jessie, sid, stretch
android-framework-23CVE-2017-0752A elevation of privilege vulnerability in the Android framework (windo ...bullseye, buster, sid, stretch
CVE-2017-0822An elevation of privilege vulnerability in the Android system (camera) ...bullseye, buster, sid, stretch
android-platform-frameworks-nativeCVE-2015-3875libutils in Android before 5.1.1 LMY48T allows remote attackers to exe ...bullseye, buster, jessie, sid, stretch
CVE-2015-6602libutils in Android through 5.1.1 LMY48M allows remote attackers to ex ...bullseye, buster, jessie, sid, stretch
CVE-2015-6609libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allo ...bullseye, buster, jessie, sid, stretch
android-platform-system-coreCVE-2012-5564android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users t ...bullseye, buster, jessie, sid, stretch
CVE-2016-0807The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x ...jessie
CVE-2016-3861LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before ...jessie
CVE-2017-0647An information disclosure vulnerability in libziparchive could enable ...stretch
CVE-2017-0841A remote code execution vulnerability in the Android system (libutils) ...bullseye, buster, jessie, sid, stretch
android-toolsCVE-2012-5564android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users t ...bullseye, buster, jessie, sid
ansibleCVE-2017-7550A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x bef ...jessie, stretch
aolserver4CVE-2009-4494AOLserver 4.5.1 writes data to a log file without sanitizing non-print ...jessie, stretch
apache2CVE-2001-1534mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's u ...bullseye, buster, jessie, sid, stretch
CVE-2003-1307bullseye, buster, jessie, sid, stretch
CVE-2003-1580The Apache HTTP Server 2.0.44, when DNS resolution is enabled for clie ...bullseye, buster, jessie, sid, stretch
CVE-2003-1581The Apache HTTP Server 2.0.44, when DNS resolution is enabled for clie ...bullseye, buster, jessie, sid, stretch
CVE-2007-0086bullseye, buster, jessie, sid, stretch
CVE-2007-1743suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combination ...bullseye, buster, jessie, sid, stretch
CVE-2007-3303Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows loc ...bullseye, buster, jessie, sid, stretch
CVE-2008-0455Cross-site scripting (XSS) vulnerability in the mod_negotiation module ...bullseye, buster, jessie, sid, stretch
CVE-2008-0456CRLF injection vulnerability in the mod_negotiation module in the Apac ...bullseye, buster, jessie, sid, stretch
aptCVE-2011-3374apt-key insecure validationbullseye, buster, jessie, sid, stretch
apt-setupCVE-2005-2214apt-setup in Debian GNU/Linux installs the apt.conf file with insecure ...bullseye, buster, jessie, sid, stretch
aroraCVE-2011-3367Arora, possibly 0.11 and other versions, does not use a certain font w ...jessie, sid
CVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...jessie, sid
asn1cCVE-2017-12966The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1 ...bullseye, buster, jessie, sid, stretch
atrilCVE-2019-11459The tiff_document_render() and tiff_document_get_thumbnail() functions ...bullseye, buster, sid, stretch
audacityCVE-2016-2540Audacity before 2.1.2 allows remote attackers to cause a denial of ser ...jessie
auditCVE-2015-5186Audit before 2.4.4 in Linux does not sanitize escape characters in fil ...jessie
automake1.11TEMP-0827346-22ED59install-sh: insecure use of /tmpjessie
avahiCVE-2017-6519avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to ...bullseye, buster, jessie, sid, stretch
awffullCVE-2007-0510Multiple buffer overflows in (1) graphs.c, (2) output.c, and (3) prese ...bullseye, buster, jessie, sid, stretch
awstatsCVE-2018-10245A Full Path Disclosure vulnerability in AWStats through 7.6 allows rem ...bullseye, buster, jessie, sid, stretch
axisCVE-2007-2353Apache Axis 1.0 allows remote attackers to obtain sensitive informatio ...bullseye, buster, jessie, sid, stretch
CVE-2019-0227A Server Side Request Forgery (SSRF) vulnerability affected the Apache ...bullseye, buster, jessie, sid, stretch
bansheeCVE-2009-1175Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in th ...jessie, stretch
bashTEMP-0841856-B18BAFPrivilege escalation possible to other user than rootbullseye, buster, jessie, sid, stretch
bash-completionCVE-2018-7738In util-linux before 2.32-rc1, bash-completion/umount allows local use ...bullseye, buster, jessie, sid, stretch
bibutilsCVE-2018-10773NULL pointer deference in the addsn function in serialno.c in libbibco ...bullseye, buster, jessie, sid, stretch
CVE-2018-10774Read access violation in the isiin_keyword function in isiin.c in libb ...bullseye, buster, jessie, sid, stretch
CVE-2018-10775NULL pointer dereference in the _fields_add function in fields.c in li ...bullseye, buster, jessie, sid, stretch
binaryenCVE-2019-15758An issue was discovered in Binaryen 1.38.32. Missing validation rules ...buster
CVE-2019-15759An issue was discovered in Binaryen 1.38.32. Two visitors in ir/Expres ...buster
bind9CVE-2016-6170ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x throug ...jessie, stretch
CVE-2018-5741To provide fine-grained controls over the ability to use Dynamic DNS ( ...jessie, stretch
binutilsCVE-2017-13716The C++ symbol demangler routine in cplus-dem.c in libiberty, as distr ...bullseye, buster, jessie, sid, stretch
CVE-2018-1000876binutils version 2.32 and earlier contains a Integer Overflow vulnerab ...buster, jessie, stretch
CVE-2018-12697A NULL pointer dereference (aka SEGV on unknown address 0x000000000000 ...buster, jessie, stretch
CVE-2018-12698demangle_template in cplus-dem.c in GNU libiberty, as distributed in G ...buster, jessie, stretch
CVE-2018-12699finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause ...buster, jessie, stretch
CVE-2018-12700A Stack Exhaustion issue was discovered in debug_write_type in debug.c ...buster, jessie, stretch
CVE-2018-12934remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU ...bullseye, buster, jessie, sid, stretch
CVE-2018-13033The Binary File Descriptor (BFD) library (aka libbfd), as distributed ...jessie, stretch
CVE-2018-17358An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2018-17359An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2018-17360An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2018-17794An issue was discovered in cplus-dem.c in GNU libiberty, as distribute ...buster, jessie, stretch
CVE-2018-17985An issue was discovered in cp-demangle.c in GNU libiberty, as distribu ...buster, jessie, stretch
CVE-2018-18309An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2018-18483The get_count function in cplus-dem.c in GNU libiberty, as distributed ...bullseye, buster, jessie, sid, stretch
CVE-2018-18484An issue was discovered in cp-demangle.c in GNU libiberty, as distribu ...buster, jessie, stretch
CVE-2018-18605A heap-based buffer over-read issue was discovered in the function sec ...buster, jessie, stretch
CVE-2018-18606An issue was discovered in the merge_strings function in merge.c in th ...buster, jessie, stretch
CVE-2018-18607An issue was discovered in elf_link_input_bfd in elflink.c in the Bina ...buster, jessie, stretch
CVE-2018-18700An issue was discovered in cp-demangle.c in GNU libiberty, as distribu ...buster, jessie, stretch
CVE-2018-18701An issue was discovered in cp-demangle.c in GNU libiberty, as distribu ...buster, jessie, stretch
CVE-2018-19931An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2018-19932An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2018-20002The _bfd_generic_read_minisymbols function in syms.c in the Binary Fil ...buster, jessie, stretch
CVE-2018-20623In GNU Binutils 2.31.1, there is a use-after-free in the error functio ...bullseye, buster, jessie, sid, stretch
CVE-2018-20651A NULL pointer dereference was discovered in elf_link_add_object_symbo ...buster, jessie, stretch
CVE-2018-20671load_specific_debug_section in objdump.c in GNU Binutils through 2.31. ...buster, jessie, stretch
CVE-2018-20673The demangle_template function in cplus-dem.c in GNU libiberty, as dis ...bullseye, buster, jessie, sid, stretch
CVE-2018-20712A heap-based buffer over-read exists in the function d_expression_1 in ...bullseye, buster, jessie, sid, stretch
CVE-2018-9138An issue was discovered in cplus-dem.c in GNU libiberty, as distribute ...buster, jessie, stretch
CVE-2018-9996An issue was discovered in cplus-dem.c in GNU libiberty, as distribute ...bullseye, buster, jessie, sid, stretch
CVE-2019-1010180GNU gdb All versions is affected by: Buffer Overflow - Out of bound me ...buster, jessie, stretch
CVE-2019-1010204GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is aff ...bullseye, buster, jessie, sid, stretch
CVE-2019-12972An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2019-14250An issue was discovered in GNU libiberty, as distributed in GNU Binuti ...buster, jessie, stretch
CVE-2019-14444apply_relocations in readelf.c in GNU Binutils 2.32 contains an intege ...buster, jessie, stretch
CVE-2019-17450find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) ...bullseye, buster, jessie, sid, stretch
CVE-2019-17451An issue was discovered in the Binary File Descriptor (BFD) library (a ...bullseye, buster, jessie, sid, stretch
CVE-2019-9070An issue was discovered in GNU libiberty, as distributed in GNU Binuti ...buster, jessie, stretch
CVE-2019-9071An issue was discovered in GNU libiberty, as distributed in GNU Binuti ...buster, jessie, stretch
CVE-2019-9073An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2019-9074An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2019-9075An issue was discovered in the Binary File Descriptor (BFD) library (a ...buster, jessie, stretch
CVE-2019-9077An issue was discovered in GNU Binutils 2.32. It is a heap-based buffe ...buster, jessie, stretch
blenderCVE-2005-3151Buffer overflow in blenderplay in Blender Player 2.37a allows attacker ...bullseye, buster, jessie, sid, stretch
CVE-2009-3850Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execut ...bullseye, buster, jessie, sid, stretch
CVE-2010-5105The undo save quit routine in the kernel in Blender 2.5, 2.63a, and ea ...bullseye, buster, jessie, sid, stretch
bluezCVE-2016-9797In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" functio ...bullseye, buster, jessie, sid, stretch
CVE-2016-9798In BlueZ 5.42, a use-after-free was identified in "conf_opt" function ...bullseye, buster, jessie, sid, stretch
CVE-2016-9799In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" funct ...bullseye, buster, jessie, sid, stretch
CVE-2016-9800In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" ...bullseye, buster, jessie, sid, stretch
CVE-2016-9801In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" functi ...bullseye, buster, jessie, sid, stretch
CVE-2016-9802In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" fun ...bullseye, buster, jessie, sid, stretch
CVE-2016-9803In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" ...bullseye, buster, jessie, sid, stretch
CVE-2016-9804In BlueZ 5.42, a buffer overflow was observed in "commands_dump" funct ...bullseye, buster, jessie, sid, stretch
CVE-2016-9917In BlueZ 5.42, a buffer overflow was observed in "read_n" function in ...bullseye, buster, jessie, sid, stretch
CVE-2016-9918In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump ...bullseye, buster, jessie, sid, stretch
bochsCVE-2007-2894The emulated floppy disk controller in Bochs 2.3 allows local users of ...bullseye, buster, jessie, sid, stretch
brandyCVE-2019-14662Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in f ...bullseye, buster, jessie, sid, stretch
CVE-2019-14663Brandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fi ...bullseye, buster, jessie, sid, stretch
CVE-2019-14665Brandy 1.20.1 has a heap-based buffer overflow in define_array in vari ...bullseye, buster, jessie, sid, stretch
bubblewrapCVE-2019-12439bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories ...stretch
busyboxCVE-2016-6301The recv_and_process_client_pkt function in networking/ntpd.c in busyb ...jessie, stretch
CVE-2018-1000500Busybox contains a Missing SSL certificate validation vulnerability in ...bullseye, buster, jessie, sid, stretch
bwaCVE-2019-11371BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow vi ...bullseye, buster, jessie, sid, stretch
byobuCVE-2019-7306Apport hook may expose sensitive informationbullseye, buster, jessie, sid, stretch
byzanzCVE-2015-2785The GIF encoder in Byzanz allows remote attackers to cause a denial of ...bullseye, buster, jessie, sid, stretch
cableswigCVE-2009-3560The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, a ...jessie
CVE-2009-3720The updatePosition function in lib/xmltok_impl.c in libexpat in Expat ...jessie
cactiCVE-2009-4112Cacti 0.8.7e and earlier allows remote authenticated administrators to ...jessie, stretch
cadaverCVE-2009-3560The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, a ...bullseye, buster, jessie, sid, stretch
CVE-2009-3720The updatePosition function in lib/xmltok_impl.c in libexpat in Expat ...bullseye, buster, jessie, sid, stretch
calamaresCVE-2019-13178modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2. ...buster
cantataCVE-2018-12559An issue was discovered in the cantata-mounter D-Bus service in Cantat ...jessie, stretch
CVE-2018-12560An issue was discovered in the cantata-mounter D-Bus service in Cantat ...jessie, stretch
CVE-2018-12561An issue was discovered in the cantata-mounter D-Bus service in Cantat ...jessie, stretch
CVE-2018-12562An issue was discovered in the cantata-mounter D-Bus service in Cantat ...jessie, stretch
capnprotoCVE-2017-7892Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to ...stretch
catdocCVE-2018-20451The process_file function in reader.c in libdoc through 2017-10-23 has ...bullseye, buster, jessie, sid, stretch
CVE-2018-20453The getlong function in numutils.c in libdoc through 2017-10-23 has a ...bullseye, buster, jessie, sid, stretch
CVE-2019-7156In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows divi ...bullseye, buster, jessie, sid, stretch
CVE-2019-7233In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer ...bullseye, buster, jessie, sid, stretch
cflowCVE-2019-16165GNU cflow through 1.6 has a use-after-free in the reference function i ...bullseye, buster, jessie, sid, stretch
CVE-2019-16166GNU cflow through 1.6 has a heap-based buffer over-read in the nexttok ...bullseye, buster, jessie, sid, stretch
chromiumCVE-2019-15903In libexpat before 2.2.8, crafted XML input could fool the parser into ...buster, sid
chromium-browserCVE-2008-7246Google Chrome 0.2.149.29 and earlier allows remote attackers to cause ...jessie, stretch
CVE-2009-0374jessie, stretch
CVE-2009-1598Google Chrome executes DOM calls in response to a javascript: URI in t ...jessie, stretch
CVE-2010-1384Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and ...jessie, stretch
CVE-2010-1992Google Chrome 1.0.154.48 executes a mail application in situations whe ...jessie, stretch
CVE-2010-4037Unspecified vulnerability in Google Chrome before 7.0.517.41 allows re ...jessie, stretch
CVE-2010-4482Unspecified vulnerability in Google Chrome before 8.0.552.215 allows r ...jessie, stretch
CVE-2011-2599Google Chrome 11 does not block use of a cross-domain image as a WebGL ...jessie, stretch
CVE-2011-3640** DISPUTED ** Untrusted search path vulnerability in Mozilla Network ...jessie, stretch
CVE-2012-5851html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chr ...jessie, stretch
CVE-2017-5130An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in ...jessie
CVE-2018-6406The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libw ...jessie, stretch
CVE-2018-6548A use-after-free issue was discovered in libwebm through 2018-02-02. I ...jessie, stretch
cifs-utilsCVE-2014-2830Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils ...bullseye, buster, jessie, sid, stretch
clementineCVE-2018-14332An issue was discovered in Clementine Music Player 1.3.1. Clementine.e ...buster, jessie, sid, stretch
coin3CVE-2009-3560The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, a ...bullseye, buster, jessie, sid, stretch
CVE-2009-3720The updatePosition function in lib/xmltok_impl.c in libexpat in Expat ...bullseye, buster, jessie, sid, stretch
confuseCVE-2018-19760cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak. ...bullseye, buster, jessie, sid, stretch
conkerorCVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...jessie, stretch
contextCVE-2017-17513TeX Live through 20170524 does not validate strings before launching t ...bullseye, buster, jessie, sid, stretch
coreutilsCVE-2017-18018In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does no ...bullseye, buster, jessie, sid, stretch
courierCVE-2004-2313Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error message ...buster, jessie, sid, stretch
CVE-2005-1308SqWebMail allows remote attackers to inject arbitrary web script or HT ...buster, jessie, sid, stretch
crossroadsCVE-2018-18654Crossroads 2.81 does not properly handle the /tmp directory during a b ...jessie, stretch
cryptsetupCVE-2016-4484The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earl ...jessie
ctnCVE-2008-5146add-accession-numbers in ctn 3.0.6 allows local users to overwrite arb ...bullseye, buster, jessie, sid, stretch
cupsCVE-2014-8166The browsing feature in the server in CUPS does not filter ANSI escape ...bullseye, buster, jessie, sid, stretch
cups-filtersTEMP-0000000-ACBC4Cbuffer overflows in init_cupsjessie
curlCVE-2016-3739The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ...jessie
CVE-2017-7407The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow ...jessie
db4oCVE-2012-6550Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 ...bullseye, buster, sid, stretch
CVE-2013-1808Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and Zero ...bullseye, buster, sid, stretch
CVE-2014-1869Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.s ...bullseye, buster, sid, stretch
dcmtkCVE-2013-6825(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/ ...bullseye, buster, jessie, sid, stretch
dcrawCVE-2013-1438Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in lib ...jessie, stretch
CVE-2018-19565A buffer over-read in crop_masked_pixels in dcraw through 9.28 could b ...bullseye, buster, jessie, sid, stretch
CVE-2018-19566A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could ...bullseye, buster, jessie, sid, stretch
CVE-2018-19567A floating point exception in parse_tiff_ifd in dcraw through 9.28 cou ...bullseye, buster, jessie, sid, stretch
CVE-2018-19568A floating point exception in kodak_radc_load_raw in dcraw through 9.2 ...bullseye, buster, jessie, sid, stretch
CVE-2018-19655A stack-based buffer overflow in the find_green() function of dcraw th ...jessie, stretch
dhcpcd5CVE-2014-7913The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as ...jessie, stretch
dilloTEMP-0560108-565B70browser-based css info disclosurebullseye, buster, jessie, sid, stretch
dirmngrCVE-2011-2207jessie
djvulibreTEMP-0775193-7F000Edjvudigital: insecure use of /tmpjessie
dnspythonCVE-2008-1447The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, ...bullseye, buster, jessie, sid, stretch
dnstracerCVE-2017-9430Stack-based buffer overflow in dnstracer through 1.9 allows attackers ...bullseye, buster, jessie, sid, stretch
dogtag-pkiCVE-2015-0234Multiple temporary file creation vulnerabilities in pki-core 10.2.0. ...sid
dojoCVE-2018-1000665Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contai ...jessie
dokuwikiCVE-2016-7965DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the ...bullseye, buster, jessie, sid
dovecotCVE-2008-4870dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedor ...bullseye, buster, jessie, sid, stretch
dpkgCVE-2017-8283dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU pat ...jessie
dpkg-crossCVE-2008-4950** DISPUTED ** gccross in dpkg-cross 2.3.0 allows local users to overw ...bullseye, buster, sid, stretch
dropbearCVE-2016-7409The dbclient and server in Dropbear SSH before 2016.74, when compiled ...jessie
drupal7CVE-2007-6752** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drup ...jessie, stretch
dwbCVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...jessie
edk2CVE-2014-4859bullseye, buster, jessie, sid, stretch
CVE-2014-4860bullseye, buster, jessie, sid, stretch
CVE-2018-12179Improper configuration in system firmware for EDK II may allow unauthe ...buster, jessie, stretch
CVE-2018-12182Insufficient memory write check in SMM service for EDK II may allow an ...bullseye, buster, jessie, sid, stretch
CVE-2019-14553invalid server certificate accepted in HTTPS-over-IPv6 bootbuster, jessie, stretch
electrumCVE-2018-6353The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 sup ...bullseye, sid
elfutilsCVE-2019-7148**DISPUTED** An attempted excessive memory allocation was discovered i ...jessie, stretch
emacs24CVE-2014-9483Emacs 24.4 allows remote attackers to bypass security restrictions. ...jessie
epiphany-browserCVE-2007-1084Mozilla Firefox 2.0.0.1 and earlier does not prompt users before savin ...bullseye, buster, jessie, sid, stretch
CVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...bullseye, buster, jessie, sid, stretch
CVE-2017-1000025GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 befo ...jessie
CVE-2018-11396ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3 ...jessie, stretch
CVE-2018-12016libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows rem ...jessie, stretch
TEMP-0560108-565B70browser-based css info disclosurebullseye, buster, jessie, sid, stretch
erlangCVE-2009-0130** DISPUTED ** lib/crypto/c_src/crypto_drv.c in erlang does not proper ...bullseye, buster, jessie, sid, stretch
CVE-2016-1000107bullseye, buster, jessie, sid, stretch
evinceCVE-2019-11459The tiff_document_render() and tiff_document_get_thumbnail() functions ...buster, stretch
evolutionCVE-2007-1266Evolution 2.8.1 and earlier does not properly use the --status-fd argu ...bullseye, buster, jessie, sid, stretch
CVE-2011-3201GNOME Evolution before 3.2.3 allows user-assisted remote attackers to ...bullseye, buster, jessie, sid, stretch
CVE-2013-4166problem in GPG key selection when encrypting mailbullseye, buster, jessie, sid, stretch
CVE-2017-17689The S/MIME specification allows a Cipher Block Chaining (CBC) malleabi ...bullseye, buster, jessie, sid, stretch
evolution-data-serverCVE-2018-12422** DISPUTED ** addressbook/backends/ldap/e-book-backend-ldap.c in Evol ...jessie, stretch
exiv2CVE-2017-11683There is a reachable assertion in the Internal::TiffReader::visitDirec ...bullseye, buster, jessie, sid, stretch
CVE-2018-14338samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realp ...bullseye, buster, jessie, sid, stretch
CVE-2019-13113Exiv2 through 0.27.1 allows an attacker to cause a denial of service ( ...bullseye, buster, jessie, sid, stretch
expatCVE-2013-0340expat 2.1.0 and earlier does not properly handle entities expansion un ...bullseye, buster, jessie, sid, stretch
eyed3CVE-2014-1934tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Pyth ...jessie
faacCVE-2018-19886An invalid memory address dereference was discovered in the huffcode f ...buster, jessie, stretch
CVE-2018-19887An invalid memory address dereference was discovered in the huffcode f ...buster, jessie, stretch
CVE-2018-19888An invalid memory address dereference was discovered in the huffcode f ...buster, jessie, stretch
CVE-2018-19889An invalid memory address dereference was discovered in the huffcode f ...buster, jessie, stretch
CVE-2018-19890An invalid memory address dereference was discovered in the huffcode f ...buster, jessie, stretch
CVE-2018-19891An invalid memory address dereference was discovered in the huffcode f ...buster, jessie, stretch
fig2devCVE-2018-16140A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3. ...stretch
firefoxCVE-2004-1639Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows re ...sid
CVE-2005-2395Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the ...sid
CVE-2005-4685Firefox and Mozilla can associate a cookie with multiple domains when ...sid
CVE-2019-12383Tor Browser before 8.0.1 has an information exposure vulnerability. It ...sid
firefox-esrCVE-2017-16541Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to ...jessie
CVE-2018-12379When the Mozilla Updater opens a MAR format file which contains a very ...jessie
CVE-2019-11719When importing a curve25519 private key in PKCS#8format with leading 0 ...jessie
CVE-2019-11729Empty or malformed p256-ECDH public keys may trigger a segmentation fa ...jessie
CVE-2019-12383Tor Browser before 8.0.1 has an information exposure vulnerability. It ...bullseye, buster, jessie, sid, stretch
CVE-2019-13075Tor Browser through 8.5.3 has an information exposure vulnerability. I ...buster, jessie, stretch
fireholCVE-2008-4953bullseye, buster, jessie, sid, stretch
flashromTEMP-0000000-C3CEDBfscanf format string security bug in flashrom layout codejessie
flightcrewCVE-2019-13032An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL point ...stretch
fontforgeCVE-2017-11570FontForge 20161012 is vulnerable to a buffer over-read in umodenc (par ...bullseye, buster, jessie, sid, stretch
CVE-2017-11573FontForge 20161012 is vulnerable to a buffer over-read in ValidatePost ...bullseye, buster, jessie, sid, stretch
CVE-2017-17521uiutil.c in FontForge through 20170731 does not validate strings befor ...bullseye, buster, jessie, sid, stretch
foomatic-filtersCVE-2011-2923foomatic-rip filter, all versions, used insecurely creates temporary f ...bullseye, buster, jessie, sid, stretch
TEMP-0000000-ACBC4Cbuffer overflows in init_cupsbullseye, buster, jessie, sid, stretch
freeipaCVE-2015-5179FreeIPA might display user data improperly via vectors involving non-p ...buster, sid
CVE-2017-12169It was found that FreeIPA 4.2.0 and later could disclose password hash ...buster, sid
freeradiusCVE-2007-0080bullseye, buster, jessie, sid, stretch
CVE-2019-10143** DISPUTED ** It was discovered freeradius up to and including versio ...bullseye, buster, jessie, sid, stretch
freerdpCVE-2014-0791Integer overflow in the license_read_scope_list function in libfreerdp ...jessie, stretch
freevoCVE-2008-4955freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary ...jessie
ganglia-webCVE-2013-6395Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web ...bullseye, buster, jessie, sid, stretch
CVE-2015-6816ganglia-web before 3.7.1 allows remote attackers to bypass authenticat ...bullseye, buster, jessie, sid, stretch
gcc-mingw-w64CVE-2016-4973Binaries compiled against targets that use the libssp library in GCC f ...bullseye, buster, jessie, sid, stretch
gdalCVE-2019-17546tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0. ...bullseye, buster, jessie, sid, stretch
gdbCVE-2014-8501The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutil ...bullseye, buster, jessie, sid, stretch
CVE-2014-9939ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow wh ...jessie
CVE-2017-9778GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length f ...buster, jessie, stretch
gdk-pixbufCVE-2017-2870An exploitable integer overflow vulnerability exists in the tiff_image ...jessie, stretch
CVE-2017-6311gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attack ...stretch
gdnsdCVE-2019-13952The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and ...bullseye, buster, jessie, sid, stretch
geditCVE-2017-14108libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to ca ...bullseye, buster, jessie, sid, stretch
geomviewCVE-2017-17530common/help.c in Geomview 1.9.5 does not validate strings before launc ...bullseye, buster, jessie, sid, stretch
gettextCVE-2018-18751An issue was discovered in GNU gettext 0.19.8. There is a double free ...jessie, stretch
giacCVE-2017-17526Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings be ...bullseye, buster, sid
gifsicleCVE-2017-18120A double-free bug in the read_gif function in gifread.c in gifsicle 1. ...jessie, stretch
gimpCVE-2007-3126Gimp before 2.8.22 allows context-dependent attackers to cause a denia ...jessie, stretch
CVE-2012-4245The scriptfu network server in GIMP 2.6 does not require authenticatio ...bullseye, buster, jessie, sid, stretch
CVE-2018-12713GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary f ...bullseye, buster, jessie, sid, stretch
gitCVE-2017-15298Git through 2.14.2 mishandles layers of tree objects, which allows rem ...bullseye, buster, jessie, sid, stretch
CVE-2018-1000021GIT version 2.15.1 and earlier contains a Input Validation Error vulne ...bullseye, buster, jessie, sid, stretch
git-repairTEMP-0807341-84E914uses non-random tempdir /tmp/tmprepo.0/.git/jessie
gjots2CVE-2017-17535lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before ...bullseye, buster, jessie, sid, stretch
glanceCVE-2013-4354The API before 2.1 in OpenStack Image Registry and Delivery Service (G ...bullseye, buster, jessie, sid, stretch
CVE-2015-8234The image signature algorithm in OpenStack Glance 11.0.0 allows remote ...bullseye, buster, jessie, sid, stretch
CVE-2016-4383The glance-manage db in all versions of HPE Helion Openstack Glance al ...bullseye, buster, jessie, sid, stretch
CVE-2016-8611A vulnerability was found in Openstack Glance. No limits are enforced ...bullseye, buster, jessie, sid, stretch
glib2.0CVE-2012-0039** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function i ...bullseye, buster, jessie, sid, stretch
glibcCVE-2010-4051The regcomp implementation in the GNU C Library (aka glibc or libc6) t ...bullseye, buster, jessie, sid, stretch
CVE-2010-4052Stack consumption vulnerability in the regcomp implementation in the G ...bullseye, buster, jessie, sid, stretch
CVE-2010-4756The glob implementation in the GNU C Library (aka glibc or libc6) allo ...bullseye, buster, jessie, sid, stretch
CVE-2015-8985The pop_fail_stack function in the GNU C Library (aka glibc or libc6) ...jessie, stretch
CVE-2018-20796In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limi ...bullseye, buster, jessie, sid, stretch
CVE-2019-1010022GNU Libc current is affected by: Mitigation bypass. The impact is: Att ...bullseye, buster, jessie, sid, stretch
CVE-2019-1010023GNU Libc current is affected by: Re-mapping current loaded libray with ...bullseye, buster, jessie, sid, stretch
CVE-2019-1010024GNU Libc current is affected by: Mitigation bypass. The impact is: Att ...bullseye, buster, jessie, sid, stretch
CVE-2019-1010025** DISPUTED ** GNU Libc current is affected by: Mitigation bypass. The ...bullseye, buster, jessie, sid, stretch
CVE-2019-6488The string component in the GNU C Library (aka glibc or libc6) through ...jessie, stretch
CVE-2019-7309In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp fun ...jessie, stretch
CVE-2019-9192** DISPUTED ** In the GNU C Library (aka glibc or libc6) through 2.29, ...bullseye, buster, jessie, sid, stretch
globalCVE-2017-17531gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launchi ...jessie
glpiCVE-2010-1618Cross-site scripting (XSS) vulnerability in the phpCAS client library ...jessie
CVE-2010-2795phpCAS before 1.1.2 allows remote authenticated users to hijack sessio ...jessie
CVE-2010-2796Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when ...jessie
CVE-2010-3690Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1 ...jessie
CVE-2010-3691PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is ena ...jessie
CVE-2010-3692Directory traversal vulnerability in the callback function in client.p ...jessie
CVE-2014-5032GLPI before 0.84.7 does not properly restrict access to cost informati ...jessie
CVE-2014-8360Directory traversal vulnerability in inc/autoload.function.php in GLPI ...jessie
CVE-2014-9258SQL injection vulnerability in ajax/getDropdownValue.php in GLPI befor ...jessie
CVE-2015-7684Unrestricted file upload in GLPI before 0.85.3 allows remote authentic ...jessie
CVE-2015-7685GLPI before 0.85.3 allows remote authenticated users to create super-a ...jessie
CVE-2016-7507Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows ...jessie
CVE-2016-7508Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authent ...jessie
CVE-2016-7509Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote ...jessie
CVE-2017-11183front/backup.php in GLPI before 9.1.5 allows remote authenticated admi ...jessie
CVE-2017-11184SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 ...jessie
CVE-2017-11329GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.ph ...jessie
CVE-2017-11474GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/com ...jessie
CVE-2017-11475GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exp ...jessie
CVE-2018-13049The constructSQL function in inc/search.class.php in GLPI 9.2.x throug ...jessie
CVE-2018-7562A remote code execution issue was discovered in GLPI through 9.2.1. Th ...jessie
CVE-2018-7563An issue was discovered in GLPI through 9.2.1. The application is affe ...jessie
CVE-2019-1010307GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). Th ...jessie
CVE-2019-1010310GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection ...jessie
CVE-2019-10231Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerab ...jessie
CVE-2019-10232Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter ...jessie
CVE-2019-10233Teclib GLPI before 9.4.1.1 is affected by a timing attack associated w ...jessie
CVE-2019-13239inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture. ...jessie
CVE-2019-13240An issue was discovered in GLPI before 9.4.1. After a successful passw ...jessie
CVE-2019-14666GLPI through 9.4.3 is prone to account takeover by abusing the ajax/au ...jessie
gnome-keyringCVE-2018-19358GNOME Keyring through 3.28.2 allows local users to retrieve login cred ...bullseye, buster, jessie, sid, stretch
CVE-2018-20781In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's pas ...jessie, stretch
gnome-orcaCVE-2013-4245Arbitrary code execution due to insecure CWD Python module loadjessie, stretch
gnome-shellCVE-2012-4427The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force ...bullseye, buster, jessie, sid, stretch
gnuchessCVE-2015-8972Stack-based buffer overflow in the ValidateMove function in frontend/m ...jessie
CVE-2019-15767In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_ ...bullseye, buster, jessie, sid, stretch
gnumailCVE-2007-1269GNUMail 1.1.2 and earlier does not properly use the --status-fd argume ...bullseye, buster, sid, stretch
gnupgCVE-2018-6829cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt mess ...jessie, bullseye, buster, sid, stretch
gnuplotCVE-2018-19490An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue all ...bullseye, buster, sid, stretch
CVE-2018-19491An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allow ...bullseye, buster, sid, stretch
CVE-2018-19492An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allo ...bullseye, buster, sid, stretch
gnutls28CVE-2011-3389The SSL protocol, as used in certain configurations in Microsoft Windo ...bullseye, buster, jessie, sid, stretch
TEMP-0000000-1BAE4DGNUTLS-SA-2016-2: certificate verification issuejessie
golangCVE-2016-5386The net/http package in Go through 1.6 does not attempt to address RFC ...jessie
google-perftoolsCVE-2018-13420** DISPUTED ** Google gperftools 2.7 has a memory leak in malloc_exten ...bullseye, buster, jessie, sid, stretch
gppCVE-2018-17076GPP through 2.25 will try to use more memory space than is available o ...bullseye, buster, jessie, sid, stretch
gpwCVE-2011-4931gpw generates shorter passwords than required ...bullseye, buster, jessie, sid, stretch
graphicsmagickCVE-2017-13066GraphicsMagick 1.3.26 has a memory leak vulnerability in the function ...jessie
CVE-2017-13147In GraphicsMagick 1.3.26, an allocation failure vulnerability was foun ...jessie
CVE-2017-13648In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the ...jessie
CVE-2017-13736There are lots of memory leaks in the GMCommand function in magick/com ...bullseye, buster, jessie, sid, stretch
CVE-2017-14042A memory allocation failure was discovered in the ReadPNMImage functio ...jessie
CVE-2017-14165The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has ...jessie
CVE-2017-14649ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does ...jessie
CVE-2018-18544There is a memory leak in the function WriteMSLImage of coders/msl.c i ...jessie, stretch
CVE-2019-16709ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrate ...buster, jessie, stretch
CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, seve ...jessie, stretch
graphvizCVE-2019-11023The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39. ...bullseye, buster, jessie, sid, stretch
grubCVE-2008-3896Grub Legacy 0.97 and earlier stores pre-boot authentication passwords ...bullseye, buster, jessie, sid, stretch
haskell-tlsCVE-2011-3389The SSL protocol, as used in certain configurations in Microsoft Windo ...bullseye, buster, jessie, sid, stretch
hex-a-hopTEMP-0528250-2E3658hex-a-hop: buffer overflow in loading save gamesbullseye, buster, jessie, sid, stretch
htslibCVE-2018-14329In HTSlib 1.8, a race condition in cram/cram_io.c might allow local us ...bullseye, buster, jessie, sid, stretch
hunspellCVE-2019-16707Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommon ...bullseye, buster, jessie, sid, stretch
icecast2CVE-2005-0837IceCast 2.20 allows remote attackers to bypass the XSL parser and obta ...bullseye, buster, jessie, sid, stretch
CVE-2005-0838Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow ...bullseye, buster, jessie, sid, stretch
icedoveCVE-2006-5633Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers t ...jessie
CVE-2008-5430Mozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixe ...jessie
imagemagickCVE-2005-0406A design flaw in image processing software that modifies JPEG images m ...bullseye, buster, jessie, sid, stretch
CVE-2008-3134Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 al ...bullseye, buster, jessie, sid, stretch
CVE-2016-8678The IsPixelMonochrome function in MagickCore/pixel-accessor.h in Image ...bullseye, buster, jessie, sid, stretch
CVE-2017-11166The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a ...jessie
CVE-2017-11531When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...jessie, stretch
CVE-2017-11532When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...jessie, stretch
CVE-2017-11534When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...jessie, stretch
CVE-2017-11536When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...jessie, stretch
CVE-2017-11539When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...jessie, stretch
CVE-2017-11644When ImageMagick 7.0.6-1 processes a crafted file in convert, it can l ...jessie, stretch
CVE-2017-11724The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9 ...jessie, stretch
CVE-2017-11751The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 al ...jessie, stretch
CVE-2017-11752The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 ...jessie, stretch
CVE-2017-11754The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 al ...bullseye, buster, jessie, sid, stretch
CVE-2017-11755The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 al ...bullseye, buster, jessie, sid, stretch
CVE-2017-12418ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM ...jessie, stretch
CVE-2017-12427The ProcessMSLScript function in coders/msl.c in ImageMagick before 6. ...jessie, stretch
CVE-2017-12428In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the f ...jessie
CVE-2017-12433In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-12564In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-12565In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-12566In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-12641ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage ...jessie, stretch
CVE-2017-12642ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in ...jessie, stretch
CVE-2017-12644ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in ...jessie, stretch
CVE-2017-12654The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 all ...jessie, stretch
CVE-2017-12662ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage i ...jessie, stretch
CVE-2017-12663ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage i ...jessie, stretch
CVE-2017-12664ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage ...jessie, stretch
CVE-2017-12665ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage ...jessie, stretch
CVE-2017-12666ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImag ...stretch
CVE-2017-12667ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in ...jessie, stretch
CVE-2017-12668ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage i ...jessie, stretch
CVE-2017-12669ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage ...jessie, stretch
CVE-2017-12671In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/ ...jessie
CVE-2017-12672In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-12673In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-12675In ImageMagick 7.0.6-3, a missing check for multidimensional data was ...jessie, stretch
CVE-2017-12676In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-13058In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-13059In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-13060In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-13062In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-13131In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the f ...jessie, stretch
CVE-2017-13141In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file c ...jessie
CVE-2017-13146In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memor ...jessie, stretch
CVE-2017-14137ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue whe ...jessie, stretch
CVE-2017-14138ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage i ...jessie, stretch
CVE-2017-14139ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage i ...jessie, stretch
CVE-2017-14324In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...jessie, stretch
CVE-2017-14325In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...jessie, stretch
CVE-2017-14326In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...jessie, stretch
CVE-2017-14342ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGIm ...jessie, stretch
CVE-2017-14343ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in ...jessie, stretch
CVE-2017-14531ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in c ...jessie, stretch
CVE-2017-14533ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c. ...jessie, stretch
CVE-2017-14684In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in t ...jessie, stretch
CVE-2017-15016ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...jessie, stretch
CVE-2017-15032ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage i ...jessie, stretch
CVE-2017-15033ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in ...jessie, stretch
CVE-2017-15217ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c. ...jessie, stretch
CVE-2017-15218ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png ...jessie, stretch
CVE-2017-17680In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17880In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based ...jessie, stretch
CVE-2017-17881In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17882In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17883In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17884In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17885In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17886In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17887In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-17934ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, rela ...jessie, stretch
CVE-2017-18008In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in ...jessie, stretch
CVE-2017-18022In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCom ...jessie, stretch
CVE-2017-18027In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...jessie, stretch
CVE-2017-18028In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was foun ...jessie, stretch
CVE-2017-18029In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in ...jessie, stretch
CVE-2017-18251An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerabil ...jessie, stretch
CVE-2017-18254An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerabil ...jessie, stretch
CVE-2017-6502An issue was discovered in ImageMagick 6.9.7. A specially crafted webp ...jessie, stretch
CVE-2017-7275The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allow ...bullseye, buster, jessie, sid, stretch
CVE-2018-10804ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage ...jessie, stretch
CVE-2018-10805ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage ...jessie, stretch
CVE-2018-11655In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was fo ...jessie, stretch
CVE-2018-11656In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was fo ...jessie, stretch
CVE-2018-13153In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand f ...jessie, stretch
CVE-2018-14434ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage ...jessie, stretch
CVE-2018-14435ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. ...jessie, stretch
CVE-2018-14436ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff. ...jessie, stretch
CVE-2018-14437ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. ...jessie, stretch
CVE-2018-15607In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x3 ...bullseye, buster, jessie, sid, stretch
CVE-2018-16640ImageMagick 7.0.8-5 has a memory leak vulnerability in the function Re ...jessie, stretch
CVE-2018-16750In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfr ...jessie, stretch
CVE-2018-17965ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage ...jessie, stretch
CVE-2018-17966ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage ...jessie, stretch
CVE-2018-17967ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage i ...jessie, stretch
CVE-2018-18016ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage ...jessie, stretch
CVE-2018-18544There is a memory leak in the function WriteMSLImage of coders/msl.c i ...jessie, stretch
CVE-2018-5246In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImag ...jessie, stretch
CVE-2018-5247In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in ...jessie, stretch
CVE-2018-5357ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function ...jessie, stretch
CVE-2018-5358ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes ...jessie, stretch
CVE-2018-6405In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0 ...jessie, stretch
CVE-2018-7470An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLo ...jessie, stretch
CVE-2018-9135In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in ...jessie, stretch
CVE-2019-10649In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SV ...bullseye, buster, jessie, sid, stretch
CVE-2019-12975ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXIm ...bullseye, buster, jessie, sid, stretch
CVE-2019-12976ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in ...bullseye, buster, jessie, sid, stretch
CVE-2019-13137ImageMagick before 7.0.8-50 has a memory leak vulnerability in the fun ...bullseye, buster, jessie, sid, stretch
CVE-2019-13301ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory becau ...bullseye, buster, jessie, sid, stretch
CVE-2019-13309ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory becau ...bullseye, buster, jessie, sid, stretch
CVE-2019-13310ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory becau ...bullseye, buster, jessie, sid, stretch
CVE-2019-13311ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory becau ...bullseye, buster, jessie, sid, stretch
CVE-2019-16708ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to ...bullseye, buster, jessie, sid, stretch
CVE-2019-16709ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrate ...bullseye, buster, jessie, sid, stretch
CVE-2019-16710ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrate ...bullseye, buster, jessie, sid, stretch
CVE-2019-16711ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in code ...bullseye, buster, jessie, sid, stretch
CVE-2019-16712ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in code ...bullseye, buster, jessie, sid, stretch
CVE-2019-16713ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrate ...bullseye, buster, jessie, sid, stretch
CVE-2019-7175In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage ...bullseye, buster, jessie, sid, stretch
CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChanne ...bullseye, buster, jessie, sid, stretch
CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage ...bullseye, buster, jessie, sid, stretch
CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, seve ...bullseye, buster, jessie, sid, stretch
CVE-2019-7398In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage ...bullseye, buster, jessie, sid, stretch
TEMP-0869722-31618Bmemory leak in quantizejessie, stretch
initramfs-toolsCVE-2008-4996bullseye, buster, jessie, sid, stretch
ioquake3CVE-2019-1010043Quake3e < 5ed740d is affected by: Buffer Overflow. The impact is: P ...bullseye, buster, jessie, sid, stretch
ipsec-toolsCVE-2018-5389The Internet Key Exchange v1 main mode is vulnerable to offline dictio ...jessie, stretch
iptablesCVE-2012-2663extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP S ...bullseye, buster, jessie, sid, stretch
CVE-2019-11360A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allo ...buster, jessie, stretch
irssiTEMP-0000000-E6792Firssi missing null terminatorjessie
isakmpdCVE-2018-5389The Internet Key Exchange v1 main mode is vulnerable to offline dictio ...bullseye, buster, sid, stretch
jasperCVE-2016-10248The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900. ...jessie
CVE-2016-8883The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 ...jessie
CVE-2016-8887The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer bef ...jessie
CVE-2016-9387Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/ ...jessie
CVE-2016-9388The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows ...jessie
CVE-2016-9389The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.90 ...jessie
CVE-2016-9390The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 a ...jessie
CVE-2016-9391The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 ...jessie
CVE-2016-9392The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allo ...jessie
CVE-2016-9393The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 ...jessie
CVE-2016-9394The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 a ...jessie
CVE-2016-9395The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 a ...jessie
CVE-2016-9396The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0. ...jessie
CVE-2016-9397The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows rem ...jessie
CVE-2016-9398The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 all ...jessie
CVE-2016-9399The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remo ...jessie
CVE-2016-9583An out-of-bounds heap read vulnerability was found in the jpc_pi_nextp ...jessie
CVE-2016-9600JasPer before version 2.0.10 is vulnerable to a null pointer dereferen ...jessie
CVE-2017-1000050JasPer 2.0.12 is vulnerable to a NULL pointer exception in the functio ...jessie
CVE-2017-13745There is a reachable assertion abort in the function jpc_dec_process_s ...jessie
CVE-2017-13746There is a reachable assertion abort in the function jpc_dec_process_s ...jessie
CVE-2017-13747There is a reachable assertion abort in the function jpc_floorlog2() i ...jessie
CVE-2017-13749There is a reachable assertion abort in the function jpc_pi_nextrpcl() ...jessie
CVE-2017-13750There is a reachable assertion abort in the function jpc_dec_process_s ...jessie
CVE-2017-13751There is a reachable assertion abort in the function calcstepsizes() i ...jessie
CVE-2017-13752There is a reachable assertion abort in the function jpc_dequantize() ...jessie
CVE-2017-5498libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote a ...jessie
CVE-2017-5499Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows ...jessie
CVE-2017-5500libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to ...jessie
CVE-2017-5501Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows ...jessie
CVE-2017-5502libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to ...jessie
CVE-2017-5504The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.2 ...jessie
CVE-2017-5505The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows rem ...jessie
CVE-2017-6850The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 all ...jessie
CVE-2017-6851The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows r ...jessie
CVE-2018-9055JasPer 2.0.14 allows denial of service via a reachable assertion in th ...jessie
CVE-2018-9154There is a reachable abort in the function jpc_dec_process_sot in libj ...jessie
CVE-2018-9252JasPer 2.0.14 allows denial of service via a reachable assertion in th ...jessie
jbigkitCVE-2017-9937In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A cr ...bullseye, buster, jessie, sid, stretch
jettyCVE-2009-3579Cross-site scripting (XSS) vulnerability in the CookieDump.java sample ...jessie
jheadCVE-2018-6612An integer underflow bug in the process_EXIF function of the exif.c fi ...jessie, stretch
CVE-2019-1010301jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of s ...buster, jessie, stretch
CVE-2019-1010302jhead 3.03 is affected by: Incorrect Access Control. The impact is: De ...buster, jessie, stretch
CVE-2019-19035jhead 3.03 is affected by: heap-based buffer over-read. The impact is: ...bullseye, buster, jessie, sid, stretch
jinja2CVE-2019-8341** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string ...bullseye, buster, jessie, sid, stretch
jqueryCVE-2007-2379The jQuery framework exchanges data using JavaScript Object Notation ( ...bullseye, buster, jessie, sid, stretch
json-glibTEMP-0772585-D41D8Cbullseye, buster, jessie, sid, stretch
jythonCVE-2017-17522** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not vali ...bullseye, buster, jessie, sid, stretch
kannelCVE-2017-14609The server daemons in Kannel 1.5.0 and earlier create a PID file after ...bullseye, buster, jessie, sid, stretch
kde-baseappsCVE-2012-4512jessie, stretch
CVE-2012-4513khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remot ...jessie, stretch
CVE-2012-4514rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows ...jessie, stretch
CVE-2012-4515Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in ...jessie, stretch
CVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...jessie, stretch
kde4libsCVE-2009-1692WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iP ...buster, jessie, stretch
CVE-2009-1718WebKit in Apple Safari before 4.0 allows user-assisted remote attacker ...buster, jessie, stretch
CVE-2009-1724Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari bef ...buster, jessie, stretch
CVE-2009-3015QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and d ...buster, jessie, stretch
CVE-2009-3272Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safar ...buster, jessie, stretch
TEMP-0560108-565B70browser-based css info disclosurebuster, jessie, stretch
TEMP-0568486-B6FCB6browser javascript document.write denial-of-servicebuster, jessie, stretch
kdepimCVE-2006-7139Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, al ...jessie, stretch
CVE-2007-1265KMail 1.9.5 and earlier does not properly use the --status-fd argument ...jessie, stretch
keepalivedCVE-2018-19044keepalived 2.0.8 didn't check for pathnames with symlinks when writing ...jessie, stretch
CVE-2018-19045keepalived 2.0.8 used mode 0666 when creating new temporary files upon ...jessie, stretch
CVE-2018-19046keepalived 2.0.8 didn't check for existing plain files when writing da ...jessie, stretch
kfreebsd-10CVE-2011-2393The Neighbor Discovery (ND) protocol implementation in the IPv6 stack ...bullseye, buster, jessie, sid, stretch
CVE-2015-1417The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2 ...jessie
CVE-2015-5675The sys_amd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allow ...jessie
CVE-2016-1879The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 ...bullseye, buster, jessie, sid, stretch
CVE-2016-1880The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and ...jessie
CVE-2016-1881The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause ...jessie
CVE-2016-1882FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remo ...jessie
CVE-2016-1883The issetugid system call in the Linux compatibility layer in FreeBSD ...jessie
CVE-2016-1885Integer signedness error in the amd64_set_ldt function in sys/amd64/am ...jessie
CVE-2016-1886Integer signedness error in the genkbd_commonioctl function in sys/dev ...jessie
CVE-2016-1887Integer signedness error in the sockargs function in sys/kern/uipc_sys ...jessie
CVE-2017-1081In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3 ...bullseye, buster, jessie, sid, stretch
CVE-2017-1082In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the ...bullseye, buster, jessie, sid, stretch
CVE-2017-1083In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is ...bullseye, buster, jessie, sid, stretch
CVE-2017-1084In FreeBSD before 11.2-RELEASE, multiple issues with the implementatio ...bullseye, buster, jessie, sid, stretch
CVE-2017-1085In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() ...bullseye, buster, jessie, sid, stretch
CVE-2017-1086In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4 ...bullseye, buster, jessie, sid, stretch
CVE-2017-1087In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE- ...bullseye, buster, jessie, sid, stretch
CVE-2017-1088In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4 ...bullseye, buster, jessie, sid, stretch
CVE-2017-15037In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_s ...bullseye, buster, jessie, sid, stretch
CVE-2018-17154In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELE ...bullseye, buster, jessie, sid, stretch
CVE-2018-17155In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE- ...bullseye, buster, jessie, sid, stretch
CVE-2018-17156In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to inc ...bullseye, buster, jessie, sid, stretch
CVE-2018-6916In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELE ...bullseye, buster, jessie, sid, stretch
CVE-2018-6917In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELE ...bullseye, buster, jessie, sid, stretch
CVE-2018-6918In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELE ...bullseye, buster, jessie, sid, stretch
CVE-2018-6919In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELE ...bullseye, buster, jessie, sid, stretch
CVE-2018-6920In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE( ...bullseye, buster, jessie, sid, stretch
CVE-2018-6921In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to in ...bullseye, buster, jessie, sid, stretch
CVE-2018-6922One of the data structures that holds TCP segments in all versions of ...bullseye, buster, jessie, sid, stretch
CVE-2018-6923In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip f ...bullseye, buster, jessie, sid, stretch
CVE-2018-6924In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4 ...bullseye, buster, jessie, sid, stretch
CVE-2018-6925In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE- ...bullseye, buster, jessie, sid, stretch
CVE-2019-5595In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r ...bullseye, buster, jessie, sid, stretch
CVE-2019-5596In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE b ...bullseye, buster, jessie, sid, stretch
CVE-2019-5597In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5598In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, ...bullseye, buster, jessie, sid, stretch
CVE-2019-5601In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5602In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5603In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5605In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5606In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5609In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5611In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
CVE-2019-5612In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEAS ...bullseye, buster, jessie, sid, stretch
kiwiCVE-2017-17532examples/framework/news/news3.py in Kiwi 1.9.22 does not validate stri ...buster, jessie, stretch
krb5CVE-2004-0971The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Sec ...bullseye, buster, jessie, sid, stretch
CVE-2017-15088plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka ...jessie, stretch
CVE-2018-5709An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The ...bullseye, buster, jessie, sid, stretch
latex2rtfCVE-2015-8106Format string vulnerability in the CmdKeywords function in funct1.c in ...jessie
lbreakout2TEMP-0608980-E8B8DFCrash with long HOME environment variablebullseye, buster, jessie, sid, stretch
leptonlibCVE-2018-7247An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Lepto ...jessie, stretch
CVE-2018-7441Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might al ...jessie, stretch
TEMP-0830660-09AE85Insecure use of /tmpjessie
lessCVE-2014-9488The is_utf8_well_formed function in GNU less before 475 allows remote ...jessie
libaoCVE-2017-11548The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 a ...bullseye, buster, jessie, sid, stretch
libapache-poi-javaCVE-2016-5000The XLSX2CSV example in Apache POI before 3.14 allows remote attackers ...bullseye, buster, jessie, sid, stretch
libavCVE-2016-7477The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 al ...jessie
CVE-2016-7499The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote ...jessie
CVE-2016-8676The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attack ...jessie
CVE-2016-9825libswscale/utils.c in libav 11.8 allows remote attackers to cause a de ...jessie
CVE-2016-9826libavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause ...jessie
CVE-2019-9717In Libav 12.3, a denial of service in the subtitle decoder allows atta ...jessie
CVE-2019-9720A stack-based buffer overflow in the subtitle decoder in Libav 12.3 al ...jessie
libcacaCVE-2018-20545There is an illegal WRITE memory access at common-image.c (function lo ...jessie
CVE-2018-20548There is an illegal WRITE memory access at common-image.c (function lo ...jessie
libcommons-collections4-javaCVE-2015-7501Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data G ...bullseye, buster, jessie, sid, stretch
libcommons-fileupload-javaCVE-2016-1000031Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation ...bullseye, buster, jessie, sid, stretch
libcrypto++CVE-2016-7420Crypto++ (aka cryptopp) through 5.6.4 does not document the requiremen ...bullseye, buster, jessie, sid, stretch
libdata-uuid-perlCVE-2013-4184symlink attacksbullseye, buster, jessie, sid, stretch
libemail-address-perlCVE-2015-7686Algorithmic complexity vulnerability in Address.pm in the Email-Addres ...jessie
CVE-2018-12558The parse() method in the Email::Address module through 1.909 for Perl ...jessie
libfsntfsCVE-2018-11727** DISPUTED ** The libfsntfs_attribute_read_from_mft function in libfs ...stretch
CVE-2018-11728** DISPUTED ** The libfsntfs_reparse_point_values_read_data function i ...stretch
CVE-2018-11729** DISPUTED ** The libfsntfs_mft_entry_read_header function in libfsnt ...stretch
CVE-2018-11730** DISPUTED ** The libfsntfs_security_descriptor_values_free function ...stretch
CVE-2018-11731** DISPUTED ** The libfsntfs_mft_entry_read_attributes function in lib ...stretch
libgaduCVE-2013-4488libgadu before 1.12.0 does not verify X.509 certificates from SSL serv ...bullseye, buster, jessie, sid, stretch
libgcrypt20CVE-2018-6829cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt mess ...bullseye, buster, jessie, sid, stretch
libgnumail-javaCVE-2005-1105Directory traversal vulnerability in the MimeBodyPart.getFileName meth ...jessie, stretch
libjpeg-turboCVE-2017-15232libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and j ...bullseye, buster, jessie, sid, stretch
libjpeg6bCVE-2016-3616The cjpeg utility in libjpeg allows remote attackers to cause a denial ...sid
libjs-handlebarsTEMP-0000000-345A3Bhandlebars: quoteless attributes in templates can lead to content injectionjessie, stretch
libjs-i18nextCVE-2017-16010i18next is a language translation framework. When using the .init meth ...bullseye, buster, sid, stretch
liblivemediaCVE-2019-7732In Live555 0.95, a setup packet can cause a memory leak leading to DoS ...bullseye, buster, jessie, sid, stretch
liblnkCVE-2018-12096** DISPUTED ** The liblnk_data_string_get_utf8_string_size function in ...bullseye, buster, sid, stretch
CVE-2018-12097** DISPUTED ** The liblnk_location_information_read_data function in l ...bullseye, buster, sid, stretch
CVE-2018-12098** DISPUTED ** The liblnk_data_block_read function in liblnk_data_bloc ...stretch
libmp3-info-perlCVE-2013-6499loading a module relative to the cwdbullseye, buster, jessie, sid, stretch
libmspackCVE-2018-18586** DISPUTED ** chmextract.c in the chmextract sample program, as distr ...jessie, stretch
libnl3CVE-2017-0553An elevation of privilege vulnerability in libnl could enable a local ...jessie
libofxCVE-2019-9656An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dere ...jessie, stretch
libokhttp-javaCVE-2018-20200** DISPUTED ** CertificatePinner.java in OkHttp 3.x through 3.12.0 all ...bullseye, buster, sid
libopenmptCVE-2019-14382DSM in libopenmpt before 0.4.2 allows an assertion failure during file ...stretch
CVE-2019-14383J2B in libopenmpt before 0.4.2 allows an assertion failure during file ...stretch
libphp-adodbCVE-2006-4976The Date Library in John Lim ADOdb Library for PHP allows remote attac ...bullseye, buster, jessie, sid, stretch
CVE-2011-3699John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain ...bullseye, buster, jessie, sid, stretch
libphp-phpmailerCVE-2017-11503PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Add ...bullseye, buster, jessie, sid, stretch
libpngCVE-2018-14048An issue has been found in libpng 1.6.34. It is a SEGV in the function ...jessie
CVE-2018-14550An issue has been found in third-party PNM decoding associated with li ...jessie
CVE-2019-6129** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a ...jessie
libpng1.6CVE-2018-14048An issue has been found in libpng 1.6.34. It is a SEGV in the function ...buster, stretch
CVE-2018-14550An issue has been found in third-party PNM decoding associated with li ...buster, stretch
CVE-2019-6129** DISPUTED ** png_create_info_struct in png.c in libpng 1.6.36 has a ...bullseye, buster, sid, stretch
libqbCVE-2019-12779libqb before 1.0.5 allows local users to overwrite arbitrary files via ...stretch
libquicktimeCVE-2017-12143In libquicktime 1.2.4, an allocation failure was found in the function ...bullseye, buster, jessie, sid, stretch
CVE-2017-12145In libquicktime 1.2.4, an allocation failure was found in the function ...bullseye, buster, jessie, sid, stretch
libreofficeCVE-2012-5639bullseye, buster, jessie, sid, stretch
CVE-2018-10583An information disclosure vulnerability occurs when LibreOffice 6.0.3 ...bullseye, buster, jessie, sid, stretch
libreswanCVE-2018-5389The Internet Key Exchange v1 main mode is vulnerable to offline dictio ...bullseye, buster, sid
libseccompCVE-2019-9893libseccomp before 2.4.0 did not correctly generate 64-bit syscall argu ...buster, jessie, stretch
libsixelCVE-2019-11024The load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has ...bullseye, buster, jessie, sid, stretch
libslf4j-javaCVE-2018-8088org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before ...jessie, stretch
libsndfileCVE-2018-13139A stack-based buffer overflow in psf_memset in common.c in libsndfile ...stretch
CVE-2018-19432An issue was discovered in libsndfile 1.0.28. There is a NULL pointer ...stretch
libsolvCVE-2018-20534** DISPUTED ** There is an illegal address access at ext/testcase.c in ...bullseye, buster, jessie, sid, stretch
libspring-javaCVE-2016-1000027jessie
libtasn1-6CVE-2018-1000654GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 c ...buster, jessie, stretch
libuvCVE-2014-9748jessie
libv8-3.14CVE-2013-2632Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, ...jessie, stretch
CVE-2013-2838Google V8, as used in Google Chrome before 27.0.1453.93, allows remote ...jessie, stretch
CVE-2013-2882Google V8, as used in Google Chrome before 28.0.1500.95, allows remote ...jessie, stretch
CVE-2013-2919Google V8, as used in Google Chrome before 30.0.1599.66, allows remote ...jessie, stretch
CVE-2013-6638Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, ...jessie, stretch
CVE-2013-6649Use-after-free vulnerability in the RenderSVGImage::paint function in ...jessie, stretch
CVE-2013-6650The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Goo ...jessie, stretch
CVE-2013-6668Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, a ...jessie, stretch
CVE-2014-1704Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, a ...jessie, stretch
CVE-2014-1705Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and L ...jessie, stretch
CVE-2014-1716Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype f ...jessie, stretch
CVE-2014-1717Google V8, as used in Google Chrome before 34.0.1847.116, does not pro ...jessie, stretch
CVE-2014-1729Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, a ...jessie, stretch
CVE-2014-1730Google V8, as used in Google Chrome before 34.0.1847.131 on Windows an ...jessie, stretch
CVE-2014-1735Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, a ...jessie, stretch
CVE-2014-1736Integer overflow in api.cc in Google V8, as used in Google Chrome befo ...jessie, stretch
CVE-2014-3152Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm ...jessie, stretch
CVE-2014-3188Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 ...jessie, stretch
CVE-2014-3195Google V8, as used in Google Chrome before 38.0.2125.101, does not pro ...jessie, stretch
CVE-2014-3199The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the ...jessie, stretch
CVE-2014-7192Eval injection vulnerability in index.js in the syntax-error package b ...jessie, stretch
CVE-2014-7927The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-l ...jessie, stretch
CVE-2014-7928hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, d ...jessie, stretch
CVE-2014-7931factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, ...jessie, stretch
CVE-2014-7939Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 ...jessie, stretch
CVE-2014-7967Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, a ...jessie, stretch
CVE-2015-1230The getHiddenProperty function in bindings/core/v8/V8EventListenerList ...jessie, stretch
CVE-2015-1290The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and ...jessie, stretch
CVE-2015-1304object-observe.js in Google V8, as used in Google Chrome before 45.0.2 ...jessie, stretch
CVE-2015-1346Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, a ...jessie, stretch
CVE-2015-2238Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as ...jessie, stretch
CVE-2015-3333Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as ...jessie, stretch
CVE-2015-3336Google Chrome before 42.0.2311.90 does not always ask the user before ...jessie, stretch
CVE-2015-6764The BasicJsonStringifier::SerializeJSArray function in json-stringifie ...jessie, stretch
CVE-2015-6771js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73 ...jessie, stretch
CVE-2015-6774Use-after-free vulnerability in the GetLoadTimes function in renderer/ ...jessie, stretch
libvpxCVE-2015-1258Google Chrome before 43.0.2357.65 relies on libvpx code that was not b ...jessie
CVE-2015-4506Buffer overflow in the vp9_init_context_buffers function in libvpx, as ...jessie
CVE-2017-0641A remote denial of service vulnerability in libvpx in Mediaserver coul ...bullseye, buster, jessie, sid, stretch
libvtermCVE-2018-20786libvterm through 0+bzr726, as used in Vim and other products, mishandl ...bullseye, buster, sid, stretch
libwebpCVE-2016-9085Multiple integer overflows in libwebp allows attackers to have unspeci ...bullseye, buster, jessie, sid, stretch
libwmfCVE-2007-3476Array index error in gd_gif_in.c in the GD Graphics Library (libgd) be ...bullseye, buster, jessie, sid, stretch
CVE-2007-3477The (a) imagearc and (b) imagefilledarc functions in GD Graphics Libra ...bullseye, buster, jessie, sid, stretch
CVE-2007-3996Multiple integer overflows in libgd in PHP before 5.2.4 allow remote a ...bullseye, buster, jessie, sid, stretch
CVE-2009-3546The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5. ...bullseye, buster, jessie, sid, stretch
TEMP-0601525-BEBB65libgd2: gdImageColorTransparent can write outside bufferbullseye, buster, jessie, sid, stretch
libxerces2-javaCVE-2012-0881Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to ca ...bullseye, buster, jessie, sid, stretch
libxfont1CVE-2017-13720In the PatternMatch function in fontfile/fontdir.c in libXfont through ...stretch
CVE-2017-13722In the pcfGetProperties function in bitmap/pcfread.c in libXfont throu ...stretch
CVE-2017-16611In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker ...stretch
libxsltCVE-2015-9019In libxslt 1.1.29 and earlier, the EXSLT math.random function was not ...bullseye, buster, jessie, sid, stretch
liloCVE-2008-3895LILO 22.6.1 and earlier stores pre-boot authentication passwords in th ...bullseye, buster, jessie, sid, stretch
links2CVE-2017-11114The put_chars function in html_r.c in Twibright Links 2.14 allows remo ...jessie, stretch
linuxCVE-2004-0230TCP, when using a large Window Size, makes it easier for remote attack ...bullseye, buster, jessie, sid, stretch
CVE-2005-3660Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service ...bullseye, buster, jessie, sid, stretch
CVE-2007-3719The process scheduler in the Linux kernel 2.6.16 gives preference to " ...bullseye, buster, jessie, sid, stretch
CVE-2008-2544bullseye, buster, jessie, sid, stretch
CVE-2008-4609The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, ...bullseye, buster, jessie, sid, stretch
CVE-2010-4563The Linux kernel, when using IPv6, allows remote attackers to determin ...bullseye, buster, jessie, sid, stretch
CVE-2010-5321Memory leak in drivers/media/video/videobuf-core.c in the videobuf sub ...bullseye, buster, jessie, sid, stretch
CVE-2011-4915bullseye, buster, jessie, sid, stretch
CVE-2011-4917bullseye, buster, jessie, sid, stretch
CVE-2012-4542block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly c ...bullseye, buster, jessie, sid, stretch
CVE-2014-3180** DISPUTED ** In kernel/compat.c in the Linux kernel before 3.17, as ...jessie
CVE-2014-9892The snd_compr_tstamp function in sound/core/compress_offload.c in the ...bullseye, buster, jessie, sid, stretch
CVE-2014-9900The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel ...bullseye, buster, jessie, sid, stretch
CVE-2015-2877** DISPUTED ** Kernel Samepage Merging (KSM) in the Linux kernel 2.6.3 ...bullseye, buster, jessie, sid, stretch
CVE-2015-4001Integer signedness error in the oz_hcd_get_desc_cnf function in driver ...jessie
CVE-2015-4002drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux k ...jessie
CVE-2015-4003The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1 ...jessie
CVE-2015-4004The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untru ...jessie
CVE-2015-7837The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, an ...jessie
CVE-2015-7885The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in th ...jessie
CVE-2015-8967arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local us ...jessie
CVE-2016-3857The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allo ...jessie
CVE-2016-9120Race condition in the ion_ioctl function in drivers/staging/android/io ...jessie
CVE-2017-11472The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in t ...jessie, stretch
CVE-2017-12762In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied in ...jessie, stretch
CVE-2017-13693The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils. ...bullseye, buster, jessie, sid, stretch
CVE-2017-13694The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobje ...bullseye, buster, jessie, sid, stretch
CVE-2017-13695The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the ...jessie, stretch
CVE-2017-18255The perf_cpu_time_max_percent_handler function in kernel/events/core.c ...jessie
CVE-2017-9984The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in t ...jessie
CVE-2017-9985The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in ...jessie
CVE-2017-9986The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel thr ...jessie, stretch
CVE-2018-1121procps-ng, procps is vulnerable to a process hiding through race condi ...bullseye, buster, jessie, sid, stretch
CVE-2018-20669An issue where a provided address with access_ok() is not checked was ...bullseye, buster, jessie, sid, stretch
CVE-2018-8043The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in ...bullseye, buster, sid, stretch
CVE-2018-9465In task_get_unused_fd_flags of binder.c, there is a possible memory co ...jessie
CVE-2019-11191** DISPUTED ** The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT i ...bullseye, buster, jessie, sid, stretch
CVE-2019-12378** DISPUTED ** An issue was discovered in ip6_ra_control in net/ipv6/i ...bullseye, buster, jessie, sid, stretch
CVE-2019-12379** DISPUTED ** An issue was discovered in con_insert_unipair in driver ...bullseye, buster, jessie, sid, stretch
CVE-2019-12380**DISPUTED** An issue was discovered in the efi subsystem in the Linux ...bullseye, buster, jessie, sid, stretch
CVE-2019-12381** DISPUTED ** An issue was discovered in ip_ra_control in net/ipv4/ip ...bullseye, buster, jessie, sid, stretch
CVE-2019-12382** DISPUTED ** An issue was discovered in drm_load_edid_firmware in dr ...bullseye, buster, jessie, sid, stretch
CVE-2019-12455** DISPUTED ** An issue was discovered in sunxi_divs_clk_setup in driv ...bullseye, buster, jessie, sid, stretch
CVE-2019-12456** DISPUTED ** An issue was discovered in the MPT3COMMAND case in _ctl ...bullseye, buster, jessie, sid, stretch
CVE-2019-12614An issue was discovered in dlpar_parse_cc_property in arch/powerpc/pla ...bullseye, buster, jessie, sid, stretch
CVE-2019-12615An issue was discovered in get_vdev_port_node_info in arch/sparc/kerne ...buster, jessie, stretch
CVE-2019-16229** DISPUTED ** drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux ...bullseye, buster, jessie, sid, stretch
CVE-2019-16230drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 doe ...bullseye, buster, jessie, sid, stretch
CVE-2019-16231drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check ...bullseye, buster, jessie, sid, stretch
CVE-2019-16232drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5. ...bullseye, buster, jessie, sid, stretch
CVE-2019-16233drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not chec ...bullseye, buster, jessie, sid, stretch
CVE-2019-16234drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5. ...bullseye, buster, jessie, sid, stretch
CVE-2019-18808A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ ...bullseye, buster, jessie, sid, stretch
CVE-2019-18810A memory leak in the komeda_wb_connector_add() function in drivers/gpu ...bullseye
TEMP-0000000-F7A20FKernel: Unprivileged user can freeze journaldbullseye, buster, jessie, sid, stretch
lldpadCVE-2018-10932lldptool version 1.0.1 and older can print a raw, unsanitized attacker ...stretch
lrzipCVE-2017-8842The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrz ...jessie, stretch
CVE-2017-8843The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 al ...jessie, stretch
CVE-2017-8845The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lr ...jessie, stretch
CVE-2017-8847The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrz ...jessie, stretch
CVE-2018-9058In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the ...jessie, stretch
CVE-2019-10654The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in ...bullseye, buster, jessie, sid, stretch
lucene-solrCVE-2017-3164Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (in ...bullseye, buster, jessie, sid, stretch
lxcCVE-2019-5736runc through 1.0-rc6, as used in Docker before 18.09.2 and other produ ...jessie, stretch
lynisCVE-2017-8108Unspecified tests in Lynis before 2.5.0 allow local users to write to ...jessie, stretch
m2cryptoCVE-2009-0127** DISPUTED ** M2Crypto does not properly check the return value from ...bullseye, buster, jessie, sid, stretch
m4CVE-2008-1687The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1. ...bullseye, buster, jessie, sid, stretch
CVE-2008-1688Unspecified vulnerability in GNU m4 before 1.4.11 might allow context- ...bullseye, buster, jessie, sid, stretch
magpierssCVE-2006-4735Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sens ...bullseye, buster, jessie, sid, stretch
maildirsyncCVE-2008-5150sample.sh in maildirsync 1.1 allows local users to append data to arbi ...bullseye, buster, jessie, sid, stretch
mailutilsCVE-2019-18862maidag in GNU Mailutils before 3.8 is installed setuid and allows loca ...bullseye, buster, jessie, sid, stretch
matanzaCVE-2009-3560The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, a ...bullseye, buster, jessie, sid, stretch
CVE-2009-3720The updatePosition function in lib/xmltok_impl.c in libexpat in Expat ...bullseye, buster, jessie, sid, stretch
mbedtlsCVE-2018-1000520ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows In ...bullseye, buster, sid, stretch
mcollectiveCVE-2014-0175default password set at installbullseye, buster, jessie, sid
mdadmCVE-2014-5220The mdcheck script of the mdadm package for openSUSE 13.2 prior to ver ...jessie
mediaelementCVE-2016-4567Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as ...bullseye, buster, jessie, sid, stretch
mediawikiCVE-2007-0894MediaWiki before 1.9.2 allows remote attackers to obtain sensitive inf ...bullseye, buster, sid, stretch
CVE-2014-1686MediaWiki 1.18.0 allows remote attackers to obtain the installation pa ...bullseye, buster, sid, stretch
mediawiki-extensionsCVE-2013-4305Cross-site scripting (XSS) vulnerability in contrib/example.php in the ...jessie
mensisCVE-2017-17534uiutil.c in Mensis 0.0.080507 does not validate strings before launchi ...jessie
mercurialCVE-2018-17983cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read du ...stretch
metviewCVE-2017-17515** DISPUTED ** etc/ObjectList in Metview 4.7.3 does not validate strin ...bullseye, buster, jessie, sid, stretch
mgettyCVE-2018-16742An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a ...jessie, stretch
CVE-2018-16743An issue was discovered in mgetty before 1.2.1. In contrib/next-login/ ...jessie, stretch
mh-bookCVE-2008-5152inmail-show in mh-book 200605 allows local users to overwrite arbitrar ...bullseye, buster, jessie, sid, stretch
midoriCVE-2012-2132libsoup 2.32.2 and earlier does not validate certificates or clear the ...bullseye, buster, sid, stretch
CVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...bullseye, buster, sid, stretch
mingw-w64CVE-2018-5392mingw-w64 version 5.0.4 by default produces executables that opt in to ...bullseye, buster, jessie, sid, stretch
mini-httpdCVE-2009-4490mini_httpd 1.19 writes data to a log file without sanitizing non-print ...bullseye, buster, sid, stretch
CVE-2017-17663The htpasswd implementation of mini_httpd before v1.28 and of thttpd b ...bullseye, buster, sid, stretch
minidjvuCVE-2017-12441The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can ca ...bullseye, buster, jessie, sid, stretch
CVE-2017-12442The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can ca ...bullseye, buster, jessie, sid, stretch
CVE-2017-12443The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 c ...bullseye, buster, jessie, sid, stretch
CVE-2017-12444The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidj ...bullseye, buster, jessie, sid, stretch
CVE-2017-12445The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cp ...bullseye, buster, jessie, sid, stretch
miniupnpcCVE-2017-1000494Uninitialized stack variable vulnerability in NameValueParserEndElt (u ...jessie, stretch
modsecurity-crsCVE-2019-11387An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) throu ...buster, jessie, stretch
CVE-2019-11388** DISPUTED ** An issue was discovered in OWASP ModSecurity Core Rule ...bullseye, buster, jessie, sid, stretch
CVE-2019-11389** DISPUTED ** An issue was discovered in OWASP ModSecurity Core Rule ...bullseye, buster, jessie, sid, stretch
CVE-2019-11390** DISPUTED ** An issue was discovered in OWASP ModSecurity Core Rule ...bullseye, buster, jessie, sid, stretch
CVE-2019-11391** DISPUTED ** An issue was discovered in OWASP ModSecurity Core Rule ...bullseye, buster, jessie, sid, stretch
moinCVE-2007-0902Unspecified vulnerability in the "Show debugging information" feature ...bullseye, buster, jessie, sid, stretch
mojarraCVE-2010-2087Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application ...bullseye, buster, jessie, sid, stretch
mongodbCVE-2015-2327PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern ...jessie, sid, stretch
CVE-2015-2328PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related ...jessie, sid, stretch
mono-reference-assembliesCVE-2018-1002208SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allow ...sid, stretch
monopdCVE-2015-0841off-by-one buffer overflow in Listener::checkActivity in libcapsinetwork/monopdbullseye, buster, jessie, sid, stretch
mozilla-noscriptCVE-2018-16983NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other ...bullseye, buster, jessie, sid
mp3spltCVE-2017-5665The splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allo ...bullseye, buster, jessie, sid
CVE-2017-5666The free_options function in options_manager.c in mp3splt 2.6.2 allows ...bullseye, buster, jessie, sid
CVE-2017-5851The free_options function in options_manager.c in mp3splt 2.6.2 allows ...bullseye, buster, jessie, sid
mpg123CVE-2017-11126The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25 ...jessie, stretch
mupdfCVE-2016-10246Buffer overflow in the main function in jstest_main.c in Mujstest in A ...bullseye, buster, jessie, sid, stretch
CVE-2016-10247Buffer overflow in the my_getline function in jstest_main.c in Mujstes ...bullseye, buster, jessie, sid, stretch
CVE-2017-6060Stack-based buffer overflow in jstest_main.c in mujstest in Artifex So ...bullseye, buster, jessie, sid, stretch
CVE-2018-1000036In MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser a ...jessie, stretch
CVE-2018-10289In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space functi ...stretch
CVE-2018-19777In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg ...buster, jessie, stretch
CVE-2018-19881In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to caus ...bullseye, buster, jessie, sid, stretch
CVE-2018-19882In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c a ...bullseye, buster, jessie, sid, stretch
mustache.jsCVE-2015-8861The handlebars package before 4.0.0 for Node.js allows remote attacker ...bullseye, buster, jessie, sid, stretch
CVE-2015-8862mustache package before 2.2.1 for Node.js allows remote attackers to c ...bullseye, buster, jessie, sid, stretch
TEMP-0000000-137F0Aquoteless attributes in templates can lead to content injectionbullseye, buster, jessie, sid, stretch
muttCVE-2007-1268Mutt 1.5.13 and earlier does not properly use the --status-fd argument ...bullseye, buster, jessie, sid, stretch
TEMP-0775199-D05A9Esmime_keys: insecure use of /tmpjessie
mxmlCVE-2018-20005An issue has been found in Mini-XML (aka mxml) 2.12. It is a use-after ...bullseye, buster, jessie, sid, stretch
mysql-5.5CVE-2012-5613jessie
CVE-2012-5627Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and ...jessie
nagios3CVE-2008-5027The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor befo ...jessie
nasmCVE-2017-14228In Netwide Assembler (NASM) 2.14rc0, there is an illegal address acces ...jessie, stretch
CVE-2018-1000667NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains ...jessie, stretch
CVE-2018-1000886nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability ...bullseye, buster, jessie, sid, stretch
CVE-2018-10316Netwide Assembler (NASM) 2.14rc0 has an endless while loop in the asse ...jessie, stretch
CVE-2018-16382Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regfla ...jessie, stretch
CVE-2018-16517asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dere ...jessie, stretch
CVE-2018-16999Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segment ...jessie, stretch
CVE-2018-19209Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in th ...jessie, stretch
CVE-2018-19213Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may le ...bullseye, buster, jessie, sid, stretch
CVE-2018-19214Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in ...jessie, stretch
CVE-2018-19215Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in ...jessie, stretch
CVE-2018-19755There is an illegal address access at asm/preproc.c (function: is_mmac ...bullseye, buster, jessie, sid, stretch
CVE-2018-20535There is a use-after-free at asm/preproc.c (function pp_getline) in Ne ...bullseye, buster, jessie, sid, stretch
CVE-2018-20538There is a use-after-free at asm/preproc.c (function pp_getline) in Ne ...bullseye, buster, jessie, sid, stretch
CVE-2019-14248In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows ...bullseye, buster, jessie, sid, stretch
CVE-2019-6290An infinite recursion issue was discovered in eval.c in Netwide Assemb ...bullseye, buster, jessie, sid, stretch
CVE-2019-6291An issue was discovered in the function expr6 in eval.c in Netwide Ass ...bullseye, buster, jessie, sid, stretch
CVE-2019-8343In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in past ...bullseye, buster, jessie, sid, stretch
net-toolsCVE-2002-1976ifconfig, when used on the Linux kernel 2.2 and later, does not report ...bullseye, buster, jessie, sid, stretch
netdataCVE-2019-9834** DISPUTED ** The Netdata web application through 1.13.0 allows remot ...bullseye, buster, sid
netmaskTEMP-0921565-C5FF8Enetmask: buffer overflow vulnerabilitystretch
netsurfCVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...jessie, sid, stretch
network-manager-appletCVE-2017-6590An issue was discovered in network-manager-applet (aka network-manager ...bullseye, buster, jessie, sid, stretch
nghttp2TEMP-0000000-A4EF31Null pointer access in inflatehd toolbullseye, buster, jessie, sid, stretch
nginxCVE-2009-4487nginx 0.7.64 writes data to a log file without sanitizing non-printabl ...bullseye, buster, jessie, sid, stretch
nip2CVE-2017-17514** DISPUTED ** boxes.c in nip2 8.4.0 does not validate strings before ...bullseye, buster, jessie, sid, stretch
nmapCVE-2017-18594nse_libssh2.cc in Nmap 7.70 is subject to a denial of service conditio ...buster, jessie, stretch
CVE-2018-15173Nmap through 7.70, when the -sV option is used, allows remote attacker ...bullseye, buster, jessie, sid, stretch
node-cliCVE-2016-1000021jessie
CVE-2016-10538The package `node-cli` before 1.0.0 insecurely uses the lock_file and ...jessie
node-cookie-signatureCVE-2016-1000236Node-cookie-signature before 1.0.6 is affected by a timing attack due ...jessie, stretch
node-debugCVE-2017-16137The debug module is vulnerable to regular expression denial of service ...jessie, stretch
node-deep-extendCVE-2018-3750The utilities function in all versions <= 0.5.0 of the deep-extend ...stretch
node-expressCVE-2014-6393The Express web framework before 3.11 and 4.x before 4.5 for Node.js d ...jessie, stretch
node-extendCVE-2018-16491A prototype pollution vulnerability was found in node.extend <1.1.7 ...jessie, stretch
CVE-2018-16492A prototype pollution vulnerability was found in module extend <2.0 ...jessie, stretch
node-growlCVE-2017-16042Growl adds growl notification support to nodejs. Growl before 1.10.2 d ...jessie
node-knockoutCVE-2019-14862bullseye, buster, sid
node-lodashCVE-2018-16487A prototype pollution vulnerability was found in lodash <4.17.11 wh ...jessie, stretch
CVE-2018-3721lodash node module before 4.17.5 suffers from a Modification of Assume ...jessie, stretch
CVE-2019-1010266lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource ...jessie, stretch
node-markedCVE-2015-1370Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Nod ...jessie
CVE-2015-8854The marked package before 0.3.4 for Node.js allows attackers to cause ...jessie
CVE-2016-10531marked is an application that is meant to parse and compile markdown. ...jessie
CVE-2017-1000427marked version 0.3.6 and earlier is vulnerable to an XSS attack in the ...jessie, stretch
CVE-2017-16114The marked module is vulnerable to a regular expression denial of serv ...jessie, stretch
node-mimeCVE-2017-16138The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expr ...jessie, stretch
node-minimatchCVE-2016-10540Minimatch is a minimal matching utility that works by converting glob ...jessie
node-momentCVE-2017-18214The moment module before 2.19.3 for Node.js is prone to a regular expr ...stretch
node-negotiatorCVE-2016-1000022jessie, stretch
CVE-2016-10539negotiator is an HTTP content negotiator for Node.js and is used by ma ...jessie, stretch
node-postgresCVE-2017-16082A remote code execution vulnerability was found within the pg module w ...jessie
node-semverCVE-2015-8855The semver package before 4.3.2 for Node.js allows attackers to cause ...jessie
node-sendCVE-2015-8859The send package before 0.11.1 for Node.js allows attackers to obtain ...jessie, stretch
TEMP-0000000-FD1F92root path disclosurejessie, stretch
node-serve-indexCVE-2015-8856Cross-site scripting (XSS) vulnerability in the serve-index package be ...jessie, stretch
node-tarCVE-2015-8860The tar package before 2.0.0 for Node.js allows remote attackers to wr ...jessie
node-uuidCVE-2015-8851jessie, stretch
node-wsCVE-2016-10518A vulnerability was found in the ping functionality of the ws module b ...jessie
TEMP-0000000-BBB7D8remote memory disclosurejessie
node-xtermCVE-2019-0542A remote code execution vulnerability exists in Xterm.js when the comp ...sid
nodejsCVE-2014-5256Node.js 0.8 before 0.8.28 and 0.10 before 0.10.30 does not consider th ...jessie
CVE-2014-9748jessie
CVE-2016-1669The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as us ...jessie
CVE-2016-2086Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0 ...jessie
CVE-2016-2216The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 ...jessie
CVE-2016-5325CRLF injection vulnerability in the ServerResponse#writeHead function ...jessie
CVE-2016-7099The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, ...jessie
CVE-2017-11499Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11. ...jessie, stretch
CVE-2018-12115In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when use ...jessie, stretch
CVE-2018-12116Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request ...jessie, stretch
CVE-2018-12120Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 list ...jessie, stretch
CVE-2018-12121Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11. ...jessie, stretch
CVE-2018-12122Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11. ...jessie, stretch
CVE-2018-12123Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11. ...jessie, stretch
CVE-2018-7158The `'path'` module in the Node.js 4.x release line contains a potenti ...jessie, stretch
CVE-2018-7159The HTTP parser in all current versions of Node.js ignores spaces in t ...jessie, stretch
CVE-2018-7167Calling Buffer.fill() or Buffer.alloc() with some parameters can lead ...jessie, stretch
CVE-2019-5737In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before ...jessie, stretch
CVE-2019-5739Keep-alive HTTP and HTTPS connections can remain open and inactive for ...jessie, stretch
novaCVE-2013-0326_base images permissions world readablebullseye, buster, jessie, sid, stretch
CVE-2015-1850Host file disclosure through qcow2 backing filebullseye, buster, jessie, sid, stretch
nsdCVE-2016-6173NSD before 4.1.11 allows remote DNS master servers to cause a denial o ...jessie
nssCVE-2017-11695Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/h ...bullseye, buster, jessie, sid, stretch
CVE-2017-11696Heap-based buffer overflow in the __hash_open function in lib/dbm/src/ ...bullseye, buster, jessie, sid, stretch
CVE-2017-11697The __hash_open function in hash.c:229 in Mozilla Network Security Ser ...bullseye, buster, jessie, sid, stretch
CVE-2017-11698Heap-based buffer overflow in the __get_page function in lib/dbm/src/h ...bullseye, buster, jessie, sid, stretch
ntpCVE-2016-2517NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to ...jessie
CVE-2017-6458Multiple buffer overflows in the ctl_put* functions in NTP before 4.2. ...jessie
CVE-2017-6462Buffer overflow in the legacy Datum Programmable Time Server (DPTS) re ...jessie
CVE-2018-12327Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 ...bullseye, buster, jessie, sid, stretch
nviCVE-2015-2305Integer overflow in the regcomp implementation in the Henry Spencer BS ...jessie
nvidia-cg-toolkitCVE-2008-5144nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local ...bullseye, buster, jessie, sid, stretch
ocaml-batteriesCVE-2017-17519batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) ...bullseye, buster, jessie, sid, stretch
ocsinventory-serverCVE-2010-1733Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02 ...bullseye, buster, jessie, sid
CVE-2014-4722Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports ...bullseye, buster, jessie, sid
CVE-2018-1000557OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross ...jessie
CVE-2018-1000558OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2 ...jessie
CVE-2018-12482OCS Inventory 2.4.1 contains multiple SQL injections in the search eng ...jessie
CVE-2018-12483OCS Inventory 2.4.1 is prone to a remote command-execution vulnerabili ...jessie
CVE-2018-14473OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing ...jessie
CVE-2018-14857Unrestricted file upload (with remote code execution) in require/mail/ ...bullseye, buster, jessie, sid
CVE-2018-15537Unrestricted file upload (with remote code execution) in OCS Inventory ...bullseye, buster, jessie, sid
onionshareCVE-2018-19960The debug_mode function in web/web.py in OnionShare through 1.3.1, whe ...jessie
open-vm-toolsTEMP-0925959-45DD25insecure handling of /tmp/VMwareDnDjessie
openexrCVE-2017-14988** DISPUTED ** Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2 ...bullseye, buster, jessie, sid, stretch
CVE-2018-18443OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/Ilm ...bullseye, buster, jessie, sid, stretch
CVE-2018-18444makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bound ...bullseye, buster, jessie, sid, stretch
openjdk-7CVE-2012-2739Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 an ...jessie
openjpegCVE-2013-4289Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1 ...jessie
CVE-2013-4290Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote att ...jessie
openjpeg2CVE-2016-10505NULL pointer dereference vulnerabilities in the imagetopnm function in ...bullseye, buster, jessie, sid, stretch
CVE-2016-10506Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, op ...bullseye, buster, jessie, sid, stretch
CVE-2016-7445convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a ...jessie
CVE-2016-9113There is a NULL pointer dereference in function imagetobmp of convertb ...bullseye, buster, jessie, sid, stretch
CVE-2016-9114There is a NULL Pointer Access in function imagetopnm of convert.c:194 ...bullseye, buster, jessie, sid, stretch
CVE-2016-9115Heap Buffer Over-read in function imagetotga of convert.c(jp2):942 in ...bullseye, buster, jessie, sid, stretch
CVE-2016-9116NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in O ...bullseye, buster, jessie, sid, stretch
CVE-2016-9117NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in O ...bullseye, buster, jessie, sid, stretch
CVE-2016-9580An integer overflow vulnerability was found in tiftoimage function in ...bullseye, buster, jessie, sid, stretch
CVE-2016-9581An infinite loop vulnerability in tiftoimage that results in heap buff ...bullseye, buster, jessie, sid, stretch
CVE-2017-12982The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG ...jessie, stretch
CVE-2017-17479In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the ...bullseye, buster, jessie, sid, stretch
CVE-2018-16375An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_i ...bullseye, buster, jessie, sid, stretch
CVE-2018-16376An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflo ...bullseye, buster, jessie, sid, stretch
CVE-2018-20845Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_nex ...buster, jessie, stretch
CVE-2018-20846Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi ...bullseye, buster, jessie, sid, stretch
CVE-2018-5727In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the o ...buster, jessie, stretch
CVE-2018-7648An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. Th ...buster, jessie, stretch
openldapCVE-2015-3276The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDA ...bullseye, buster, jessie, sid, stretch
CVE-2017-14159slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping ...bullseye, buster, jessie, sid, stretch
CVE-2017-17740contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when bot ...bullseye, buster, jessie, sid, stretch
openrptCVE-2015-2305Integer overflow in the regcomp implementation in the Henry Spencer BS ...buster, jessie, stretch
openscCVE-2019-6502sc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory ...bullseye, buster, jessie, sid, stretch
opensshCVE-2007-2243OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ...bullseye, buster, jessie, sid, stretch
CVE-2007-2768OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ...bullseye, buster, jessie, sid, stretch
CVE-2008-3234sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ...bullseye, buster, jessie, sid, stretch
CVE-2016-10010sshd in OpenSSH before 7.4, when privilege separation is not used, cre ...jessie
CVE-2019-16905OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an expe ...buster
CVE-2019-6110In OpenSSH 7.9, due to accepting and displaying arbitrary stderr outpu ...bullseye, buster, jessie, sid, stretch
opensslCVE-2007-6755The NIST SP 800-90A default statement of the Dual Elliptic Curve Deter ...bullseye, buster, jessie, sid, stretch
CVE-2010-0928OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex- ...bullseye, buster, jessie, sid, stretch
openstack-troveCVE-2015-3156The _write_config function in trove/guestagent/datastore/experimental/ ...jessie, sid, stretch
openvpnCVE-2006-2229OpenVPN 2.0.7 and earlier, when configured to use the --management opt ...bullseye, buster, jessie, sid, stretch
CVE-2016-6329OpenVPN, when using a 64-bit block cipher, makes it easier for remote ...bullseye, buster, jessie, sid, stretch
CVE-2017-7522OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to deni ...stretch
CVE-2018-7544** DISPUTED ** A cross-protocol scripting issue was discovered in the ...bullseye, buster, jessie, sid, stretch
openvswitchCVE-2017-14970In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multip ...jessie, stretch
CVE-2017-9263In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status mes ...stretch
CVE-2017-9264In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS ...stretch
CVE-2017-9265In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsin ...stretch
optipngCVE-2015-7802gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote a ...jessie
opus-toolsCVE-2014-9638oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial ...jessie
os-proberCVE-2008-5135bullseye, buster, jessie, sid, stretch
oscCVE-2012-1095osc before 0.134 might allow remote OBS repository servers or package ...bullseye, buster, jessie, sid, stretch
otrs2CVE-2018-7567** DISPUTED ** In the Admin Package Manager in Open Ticket Request Sys ...bullseye, buster, jessie, sid, stretch
parallelCVE-2015-4155GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) - ...jessie
CVE-2015-4156GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fi ...jessie
parsoCVE-2019-12760** DISPUTED ** A deserialization vulnerability exists in the way parso ...buster
pasdocCVE-2017-17527** DISPUTED ** delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does n ...jessie, stretch
passengerCVE-2016-10345In Phusion Passenger before 5.1.0, a known /tmp filename was used duri ...bullseye, buster, sid, stretch
patchCVE-2010-4651Directory traversal vulnerability in util.c in GNU patch 2.6.1 and ear ...bullseye, buster, jessie, sid, stretch
CVE-2016-10713An issue was discovered in GNU patch before 2.7.6. Out-of-bounds acces ...jessie, stretch
CVE-2018-6951An issue was discovered in GNU patch through 2.7.6. There is a segment ...bullseye, buster, jessie, sid, stretch
CVE-2018-6952A double free exists in the another_hunk function in pch.c in GNU patc ...bullseye, buster, jessie, sid, stretch
pax-utilsTEMP-0856196-13C562scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c)jessie, stretch
pcre2CVE-2017-8786pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial o ...stretch
pcre3CVE-2017-11164In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exe ...bullseye, buster, jessie, sid, stretch
CVE-2017-16231** DISPUTED ** In PCRE 8.41, after compiling, a pcretest load test PoC ...bullseye, buster, jessie, sid, stretch
CVE-2017-7245Stack-based buffer overflow in the pcre32_copy_substring function in p ...bullseye, buster, jessie, sid, stretch
CVE-2017-7246Stack-based buffer overflow in the pcre32_copy_substring function in p ...bullseye, buster, jessie, sid, stretch
pdfresurrectCVE-2019-14267PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because ...buster, jessie, stretch
percona-toolkitCVE-2015-1027The version checking subroutine in percona-toolkit before 2.2.13 and x ...jessie, jessie
perlCVE-2011-4116unsafe traversal of symlinksbullseye, buster, jessie, sid, stretch
TEMP-0769606-4AA6CFa2p: buffer overflowjessie
phabricatorCVE-2017-17536Phabricator before 2017-11-10 does not block the --config and --debugg ...bullseye, buster, sid, stretch
php-font-libCVE-2014-2570Cross-site scripting (XSS) vulnerability in www/make_subset.php in PHP ...bullseye, buster, jessie, sid, stretch
php-gettextTEMP-0000000-07A77Dphp-gettext XSSbuster, jessie, sid, stretch
php-openidCVE-2016-2049examples/consumer/common.php in JanRain PHP OpenID library (aka php-op ...jessie
php-pearCVE-2017-5630PECL in the download utility class in the Installer in PEAR Base Syste ...bullseye, buster, sid, stretch
php5CVE-2006-0931Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other ...jessie
CVE-2006-4023The ip2long function in PHP 5.1.4 and earlier may incorrectly validate ...jessie
CVE-2006-6383PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_base ...jessie
CVE-2006-7205The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 ...jessie
CVE-2007-0448The fopen function in PHP 5.2.0 does not properly handle invalid URI h ...jessie
CVE-2007-1413Buffer overflow in the snmpget function in the snmp extension in PHP 5 ...jessie
CVE-2007-1581The resource system in PHP 5.0.0 through 5.2.1 allows context-dependen ...jessie
CVE-2007-1582The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 ...jessie
CVE-2007-1710The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-de ...jessie
CVE-2007-1835PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session ...jessie
CVE-2007-1883PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-depende ...jessie
CVE-2007-1890Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and ...jessie
CVE-2007-3205The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, ...jessie
CVE-2007-3294Multiple buffer overflows in libtidy, as used in the Tidy extension fo ...jessie
CVE-2007-4255Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-depe ...jessie
CVE-2007-4596The perl extension in PHP does not follow safe_mode restrictions, whic ...jessie
CVE-2007-4889The MySQL extension in PHP 5.2.4 and earlier allows remote attackers t ...jessie
CVE-2007-5424The disable_functions feature in PHP 4 and 5 allows attackers to bypas ...jessie
CVE-2008-2666Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier ...jessie
CVE-2008-4107The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cry ...jessie
CVE-2008-5625PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictio ...jessie
CVE-2008-7002PHP 5.2.5 does not enforce (a) open_basedir and (b) safe_mode_exec_dir ...jessie
CVE-2009-3559jessie
CVE-2009-4418The unserialize function in PHP 5.3.0 and earlier allows context-depen ...jessie
CVE-2010-1861The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 ...jessie
CVE-2010-1862The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3 ...jessie
CVE-2010-1868The (1) sqlite_single_query and (2) sqlite_array_query functions in ex ...jessie
CVE-2010-1914The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows ...jessie
CVE-2010-1915The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3. ...jessie
CVE-2010-2097The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode ...jessie
CVE-2010-2100The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_b ...jessie
CVE-2010-2101The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_w ...jessie
CVE-2010-2190The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions i ...jessie
CVE-2010-3062mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3 ...jessie
CVE-2010-3063The php_mysqlnd_read_error_from_line function in the Mysqlnd extension ...jessie
CVE-2010-3064Stack-based buffer overflow in the php_mysqlnd_auth_write function in ...jessie
CVE-2012-1171The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to by ...jessie
CVE-2012-3365The SQLite functionality in PHP before 5.3.15 allows remote attackers ...jessie
CVE-2013-3735** DISPUTED ** The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 bef ...jessie
CVE-2013-6501The default soap.wsdl_cache_dir setting in (1) php.ini-production and ...jessie
CVE-2014-5459The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows lo ...jessie
CVE-2014-9425Double free vulnerability in the zend_ts_hash_graceful_destroy functio ...jessie
CVE-2015-9253An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before ...jessie
CVE-2016-5116gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used ...jessie
CVE-2017-11362In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/ms ...jessie
CVE-2017-5630PECL in the download utility class in the Installer in PEAR Base Syste ...jessie
CVE-2017-7890The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in th ...jessie
CVE-2017-9118PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a c ...jessie
CVE-2017-9119The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 all ...jessie
CVE-2019-11038When using the gdImageCreateFromXbm() function in the GD Graphics Libr ...jessie
CVE-2019-6977gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka ...jessie
CVE-2019-9675** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7. ...jessie
php7.0CVE-2015-9253An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before ...stretch
CVE-2017-9118PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a c ...stretch
CVE-2017-9119The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 all ...stretch
CVE-2017-9120PHP 7.x through 7.1.5 allows remote attackers to cause a denial of ser ...stretch
CVE-2019-6977gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka ...stretch
phpldapadminCVE-2018-12689phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id param ...jessie, sid
phpmyadminCVE-2005-3622phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain t ...jessie, sid, stretch
CVE-2005-4349jessie, sid, stretch
CVE-2006-6373PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive infor ...jessie, sid, stretch
CVE-2007-4306Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10 ...jessie, sid, stretch
CVE-2015-8669libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12 ...jessie
CVE-2015-8980The plural form formula in ngettext family of calls in php-gettext bef ...jessie
CVE-2016-2038phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x be ...jessie
CVE-2016-2042phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote ...jessie
CVE-2016-5730phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x be ...jessie
CVE-2016-6610A full path disclosure vulnerability was discovered in phpMyAdmin wher ...jessie
CVE-2016-6625An issue was discovered in phpMyAdmin. An attacker can determine wheth ...jessie
CVE-2016-6633An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigg ...jessie
CVE-2016-9847An issue was discovered in phpMyAdmin. When the user does not specify ...jessie
CVE-2016-9848An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP ...jessie
CVE-2016-9852An issue was discovered in phpMyAdmin. By calling some scripts that ar ...jessie
CVE-2016-9853An issue was discovered in phpMyAdmin. By calling some scripts that ar ...jessie
CVE-2016-9854An issue was discovered in phpMyAdmin. By calling some scripts that ar ...jessie
CVE-2016-9855An issue was discovered in phpMyAdmin. By calling some scripts that ar ...jessie
CVE-2016-9856An XSS issue was discovered in phpMyAdmin because of an improper fix f ...jessie
CVE-2016-9857An issue was discovered in phpMyAdmin. XSS is possible because of a we ...jessie
CVE-2016-9858An issue was discovered in phpMyAdmin. With a crafted request paramete ...jessie
CVE-2016-9859An issue was discovered in phpMyAdmin. With a crafted request paramete ...jessie
CVE-2016-9860An issue was discovered in phpMyAdmin. An unauthenticated user can exe ...jessie
CVE-2016-9866An issue was discovered in phpMyAdmin. When the arg_separator is diffe ...jessie
CVE-2017-1000013phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakne ...jessie
CVE-2017-1000014phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the t ...jessie
CVE-2017-1000015phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack ...jessie
CVE-2017-1000016A weakness was discovered where an attacker can inject arbitrary value ...jessie
CVE-2017-1000017phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user ...jessie
CVE-2017-1000018phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the re ...jessie
phppgadminCVE-2006-4976The Date Library in John Lim ADOdb Library for PHP allows remote attac ...jessie
phpsysinfoCVE-2006-3360Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 all ...jessie, sid
pidginCVE-2008-2956bullseye, buster, jessie, sid, stretch
CVE-2012-1257bullseye, buster, jessie, sid, stretch
pillowCVE-2014-3606bullseye, buster, jessie, sid, stretch
CVE-2016-3076Heap-based buffer overflow in the j2k_encode_entry function in Pillow ...bullseye, buster, jessie, sid, stretch
polarsslCVE-2011-3389The SSL protocol, as used in certain configurations in Microsoft Windo ...jessie
CVE-2018-1000520ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows In ...jessie
popplerCVE-2013-4472The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 a ...bullseye, buster, jessie, sid, stretch
CVE-2017-2814An exploitable heap overflow vulnerability exists in the image renderi ...bullseye, buster, jessie, sid, stretch
CVE-2017-2818An exploitable heap overflow vulnerability exists in the image renderi ...bullseye, buster, jessie, sid, stretch
CVE-2017-2820An exploitable integer overflow vulnerability exists in the JPEG 2000 ...bullseye, buster, jessie, sid, stretch
CVE-2017-7511poppler since version 0.17.3 has been vulnerable to NULL pointer deref ...jessie, stretch
CVE-2017-7515poppler through version 0.55.0 is vulnerable to an uncontrolled recurs ...jessie, stretch
CVE-2017-9083poppler 0.54.0, as used in Evince and other products, has a NULL point ...bullseye, buster, jessie, sid, stretch
CVE-2018-19059An issue was discovered in Poppler 0.71.0. There is a out-of-bounds re ...bullseye, buster, jessie, sid, stretch
CVE-2018-19060An issue was discovered in Poppler 0.71.0. There is a NULL pointer der ...bullseye, buster, jessie, sid, stretch
CVE-2018-19149Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attac ...bullseye, buster, jessie, sid, stretch
postbooksCVE-2017-17525guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate st ...buster, jessie, stretch
postgresql-11CVE-2019-9193** DISPUTED ** In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGR ...bullseye, buster, sid, jessie, stretch
potraceCVE-2017-12067Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubi ...jessie, stretch
powerpc-utilsCVE-2014-4040snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot ...jessie
pppCVE-2008-5366The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local u ...bullseye, buster, jessie, sid, stretch
CVE-2008-5367ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to o ...bullseye, buster, jessie, sid, stretch
printfilters-ppdCVE-2008-5034jessie, sid
protobufCVE-2015-5237protobuf allows remote authenticated attackers to cause a heap-based b ...bullseye, buster, jessie, sid, stretch
psppCVE-2017-10791There is an Integer overflow in the hash_int function of the libpspp l ...jessie, stretch
CVE-2017-10792There is a NULL Pointer Dereference in the function ll_insert() of the ...jessie, stretch
CVE-2017-12958There is an illegal address access in the function output_hex() in dat ...jessie, stretch
CVE-2017-12959There is a reachable assertion abort in the function dict_add_mrset() ...jessie, stretch
CVE-2017-12960There is a reachable assertion abort in the function dict_rename_var() ...jessie, stretch
CVE-2017-12961There is an assertion abort in the function parse_attributes() in data ...jessie, stretch
CVE-2019-9211There is a reachable assertion abort in the function write_long_string ...buster, jessie, sid, stretch
ptlibCVE-2015-2305Integer overflow in the regcomp implementation in the Henry Spencer BS ...jessie, stretch
puppet-module-puppetlabs-apacheCVE-2018-6508Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remot ...bullseye, buster, jessie, sid, stretch, bullseye, buster, jessie, sid, stretch, bullseye, buster, jessie, sid, stretch
puttyCVE-2019-17069PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial o ...buster, jessie, stretch
pwgenCVE-2013-4441Phonemes mode has heavy bias and is enabled by defaultbullseye, buster, jessie, sid, stretch
py-lmdbCVE-2019-16224An issue was discovered in py-lmdb 0.97. For certain values of md_flag ...bullseye, sid, stretch
CVE-2019-16225An issue was discovered in py-lmdb 0.97. For certain values of mp_flag ...bullseye, sid, stretch
CVE-2019-16226An issue was discovered in py-lmdb 0.97. mdb_node_del does not validat ...bullseye, sid, stretch
CVE-2019-16227An issue was discovered in py-lmdb 0.97. For certain values of mn_flag ...bullseye, sid, stretch
CVE-2019-16228An issue was discovered in py-lmdb 0.97. There is a divide-by-zero err ...bullseye, sid, stretch
pycode-browserCVE-2015-0849predictable temporary file vulnerabilityjessie
python-defaultsCVE-2008-4108Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) i ...bullseye, buster, jessie, sid, stretch
python-numpyCVE-2017-12852The numpy.pad function in Numpy 1.13.1 and older versions is missing i ...bullseye, buster, jessie, sid, stretch
python-rplyCVE-2014-1938insecure use of /tmpjessie
python-scrapyCVE-2017-14158Scrapy 1.4 allows remote attackers to cause a denial of service (memor ...bullseye, buster, jessie, sid, stretch
python2.7CVE-2013-7040Python 2.7 before 3.4 only uses the last eight bits of the prefix to r ...bullseye, buster, jessie, sid, stretch
CVE-2016-1000110jessie
CVE-2017-17522** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not vali ...bullseye, buster, jessie, sid, stretch
CVE-2018-1000030Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Hea ...jessie, stretch
CVE-2019-18348An issue was discovered in urllib2 in Python 2.x through 2.7.17 and ur ...bullseye, buster, jessie, sid, stretch
python3.4CVE-2016-1000110jessie
CVE-2017-17522** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not vali ...jessie
CVE-2019-18348An issue was discovered in urllib2 in Python 2.x through 2.7.17 and ur ...jessie
python3.5CVE-2017-17522** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not vali ...stretch
CVE-2018-20406Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a ...stretch
CVE-2019-18348An issue was discovered in urllib2 in Python 2.x through 2.7.17 and ur ...stretch
python3.7CVE-2017-17522** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not vali ...bullseye, buster, sid
CVE-2019-18348An issue was discovered in urllib2 in Python 2.x through 2.7.17 and ur ...bullseye, buster, sid, bullseye, sid
pyyamlCVE-2017-18342In PyYAML before 5.1, the yaml.load() API could execute arbitrary code ...buster, jessie, stretch
qemuCVE-2016-10028The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEM ...stretch
CVE-2017-5552Memory leak in the virgl_resource_attach_backing function in hw/displa ...stretch
CVE-2017-5578Memory leak in the virtio_gpu_resource_attach_backing function in hw/d ...stretch
CVE-2017-8284** DISPUTED ** The disas_insn function in target/i386/translate.c in Q ...jessie, stretch
CVE-2017-9060Memory leak in the virtio_gpu_set_scanout function in hw/display/virti ...stretch
CVE-2018-20123pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak ...buster
CVE-2018-20124hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of ...buster
CVE-2018-20125hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of ...buster
CVE-2018-20126hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory ...buster
CVE-2018-20191hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation ...buster
CVE-2018-20216QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c becaus ...buster
CVE-2019-12247** DISPUTED ** QEMU 3.0.0 has an Integer Overflow because the qga/comm ...bullseye, buster, jessie, sid, stretch
CVE-2019-12928** DISPUTED ** The QMP migrate command in QEMU version 4.0.0 and earli ...bullseye, buster, jessie, sid, stretch
CVE-2019-12929** DISPUTED ** The QMP guest_exec command in QEMU 4.0.0 and earlier is ...bullseye, buster, jessie, sid, stretch
qpid-protonCVE-2018-17187The Apache Qpid Proton-J transport includes an optional wrapper layer ...jessie, stretch
qt4-x11CVE-2009-3015QtWeb 3.0 Builds 001 and 003 does not properly block javascript: and d ...bullseye, buster, jessie, sid, stretch
CVE-2009-3272Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safar ...bullseye, buster, jessie, sid, stretch
TEMP-0560108-565B70browser-based css info disclosurebullseye, buster, jessie, sid, stretch
TEMP-0568486-B6FCB6browser javascript document.write denial-of-servicebullseye, buster, jessie, sid, stretch
qtwebkitCVE-2015-8079qt5-qtwebkit before 5.4 records private browsing URLs to its favicon d ...buster, jessie, stretch
quaggaCVE-2012-5521bullseye, buster, jessie, sid, stretch
railsCVE-2010-3299The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to p ...bullseye, buster, jessie, sid, stretch
CVE-2011-3187The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip ...bullseye, buster, jessie, sid, stretch
CVE-2017-17916** DISPUTED ** SQL injection vulnerability in the 'find_by' method in ...bullseye, buster, jessie, sid, stretch
CVE-2017-17917** DISPUTED ** SQL injection vulnerability in the 'where' method in Ru ...bullseye, buster, jessie, sid, stretch
CVE-2017-17919** DISPUTED ** SQL injection vulnerability in the 'order' method in Ru ...bullseye, buster, jessie, sid, stretch
CVE-2017-17920** DISPUTED ** SQL injection vulnerability in the 'reorder' method in ...bullseye, buster, jessie, sid, stretch
recutilsCVE-2019-11637An issue was discovered in GNU recutils 1.8. There is a NULL pointer d ...bullseye, buster, jessie, sid, stretch
CVE-2019-11638An issue was discovered in GNU recutils 1.8. There is a NULL pointer d ...bullseye, buster, jessie, sid, stretch
CVE-2019-11639An issue was discovered in GNU recutils 1.8. There is a stack-based bu ...bullseye, buster, jessie, sid, stretch
CVE-2019-11640An issue was discovered in GNU recutils 1.8. There is a heap-based buf ...bullseye, buster, jessie, sid, stretch
CVE-2019-6455An issue was discovered in GNU Recutils 1.8. There is a double-free pr ...bullseye, buster, jessie, sid, stretch
CVE-2019-6456An issue was discovered in GNU Recutils 1.8. There is a NULL pointer d ...bullseye, buster, jessie, sid, stretch
CVE-2019-6457An issue was discovered in GNU Recutils 1.8. There is a memory leak in ...bullseye, buster, jessie, sid, stretch
CVE-2019-6458An issue was discovered in GNU Recutils 1.8. There is a memory leak in ...bullseye, buster, jessie, sid, stretch
CVE-2019-6459An issue was discovered in GNU Recutils 1.8. There is a memory leak in ...bullseye, buster, jessie, sid, stretch
CVE-2019-6460An issue was discovered in GNU Recutils 1.8. There is a NULL pointer d ...bullseye, buster, jessie, sid, stretch
redisCVE-2017-15047The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows atta ...stretch
remindCVE-2015-5957Buffer overflow in the DumpSysVar function in var.c in Remind before 3 ...jessie
resiprocateCVE-2017-9454Buffer overflow in the ares_parse_a_reply function in the embedded are ...jessie, stretch
rhn-client-toolsCVE-2015-1777rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Re ...jessie, stretch
rhythmboxCVE-2008-7185GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of se ...bullseye, buster, jessie, sid, stretch
rieceTEMP-0601325-4C9A5Binsecure handling of /tmp files in debian/preinstjessie
roundcubeCVE-2018-1000071roundcube version 1.3.4 and earlier contains an Insecure Permissions v ...bullseye, buster, sid
rpmCVE-2010-2198lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadat ...bullseye, buster, jessie, sid, stretch
CVE-2010-2199lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadat ...bullseye, buster, jessie, sid, stretch
CVE-2017-7500It was found that rpm did not properly handle RPM installations when a ...bullseye, buster, jessie, sid, stretch
CVE-2017-7501It was found that versions of rpm before 4.13.0.2 use temporary files ...bullseye, buster, jessie, sid, stretch
rsyslogCVE-2015-3243rsyslog uses weak permissions for generating log files, which allows l ...bullseye, buster, jessie, sid, stretch
CVE-2017-12588The zmq3 input and output modules in rsyslog before 8.28.0 interpreted ...jessie, stretch
rtpproxyCVE-2017-14114RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in ...jessie, sid, stretch
rtvCVE-2017-17516scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 d ...bullseye, buster, sid, stretch
ruby-handlebars-assetsTEMP-0000000-345A3Bhandlebars: quoteless attributes in templates can lead to content injectionbullseye, buster, jessie, sid, stretch
ruby2.1CVE-2014-3916The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 all ...jessie
s3dCVE-2014-1226The pipe_init_terminal function in main.c in s3dvt allows local users ...jessie
sambaCVE-2019-3824A flaw was found in the way an LDAP search expression could crash the ...jessie, stretch
scalaCVE-2017-15288The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, ...jessie, stretch
scummvmCVE-2017-17528backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not valida ...bullseye, buster, jessie, sid, stretch
seahorseCVE-2008-7320** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate ...bullseye, buster, jessie, sid, stretch
shadowCVE-2007-5686initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...bullseye, buster, jessie, sid, stretch
CVE-2013-4235TOCTOU race conditions by copying and removing directory treesbullseye, buster, jessie, sid, stretch
TEMP-0628843-DBAD28more related to CVE-2005-4890bullseye, buster, jessie, sid, stretch
shairport-syncCVE-2017-12087An exploitable heap overflow vulnerability exists in the tinysvcmdns l ...stretch
sharutilsTEMP-0000000-95CBBFuudecode: stack out of bounds read accessbullseye, buster, jessie, sid, stretch
shotwellCVE-2017-1000024Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable ...jessie
simplesamlphpCVE-2016-3124The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote at ...jessie
sipcrackCVE-2017-11654An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 ...bullseye, buster, jessie, sid, stretch
CVE-2017-11655A memory leak was found in the way SIPcrack 0.2 handled processing of ...bullseye, buster, jessie, sid, stretch
sleuthkitCVE-2017-13755In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image trigge ...jessie, stretch
CVE-2017-13756In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers i ...jessie, stretch
CVE-2017-13760In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in t ...jessie, stretch
CVE-2019-1010065The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The ...jessie, stretch
CVE-2019-14531An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out ...bullseye, buster, jessie, sid, stretch
CVE-2019-14532An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off ...bullseye, buster, jessie, sid, stretch
slimTEMP-0537604-F35BD7insecure tmp file vulnerability in slimbullseye, buster, jessie, sid, stretch
smsclientCVE-2008-5155mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitr ...jessie
TEMP-0498901-F99C05unsafe use of tempfile in ssmclientjessie
sosreportCVE-2014-0246SOSreport stores the md5 hash of the GRUB bootloader password in an ar ...bullseye, buster, jessie, sid, stretch
CVE-2015-7529sosreport in SoS 3.x allows local users to obtain sensitive informatio ...jessie
sphinxsearchCVE-2019-14511Sphinx Technologies Sphinx 3.1.1 by default has no authentication and ...bullseye, buster, sid, stretch
spice-gtkCVE-2016-3066The spice-gtk widget allows remote authenticated users to obtain infor ...bullseye, buster, jessie, sid, stretch
sql-ledgerCVE-2007-0667The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2 ...bullseye, buster, jessie, sid, stretch
CVE-2007-1329Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before ...bullseye, buster, jessie, sid, stretch
CVE-2007-1923(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control ...bullseye, buster, jessie, sid, stretch
CVE-2007-5372Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through ...bullseye, buster, jessie, sid, stretch
CVE-2008-4077The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledg ...bullseye, buster, jessie, sid, stretch
CVE-2008-4078SQL injection vulnerability in the AR/AP transaction report in (1) Led ...bullseye, buster, jessie, sid, stretch
CVE-2009-3580Cross-site request forgery (CSRF) vulnerability in am.pl in SQL-Ledger ...bullseye, buster, jessie, sid, stretch
CVE-2009-3581Multiple cross-site scripting (XSS) vulnerabilities in SQL-Ledger 2.8. ...bullseye, buster, jessie, sid, stretch
CVE-2009-3582Multiple SQL injection vulnerabilities in the delete subroutine in SQL ...bullseye, buster, jessie, sid, stretch
CVE-2009-3583Directory traversal vulnerability in the Preferences menu item in SQL- ...bullseye, buster, jessie, sid, stretch
CVE-2009-3584SQL-Ledger 2.8.24 does not set the secure flag for the session cookie ...bullseye, buster, jessie, sid, stretch
CVE-2009-4402The default configuration of SQL-Ledger 2.8.24 allows remote attackers ...bullseye, buster, jessie, sid, stretch
sqlite3CVE-2017-13685The dump_callback function in SQLite 3.20.0 allows remote attackers to ...jessie, stretch
squidCVE-2009-0801Squid, when transparent interception mode is enabled, uses the HTTP Ho ...bullseye, buster, sid
CVE-2014-6270Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squi ...bullseye, buster, sid
CVE-2015-3455Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, a ...bullseye, buster, sid
CVE-2016-2390The FwdState::connectedToPeer method in FwdState.cc in Squid before 3. ...bullseye, buster, sid
CVE-2018-1172This vulnerability allows remote attackers to deny service on vulnerab ...bullseye, buster, sid
squid3CVE-2015-3455Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, a ...jessie
CVE-2016-2390The FwdState::connectedToPeer method in FwdState.cc in Squid before 3. ...jessie
CVE-2018-1172This vulnerability allows remote attackers to deny service on vulnerab ...jessie, stretch
CVE-2018-19131Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S ...jessie, stretch
squidguardCVE-2015-8936Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGua ...jessie
ssmtpCVE-2004-0423The log_event function in ssmtp 2.50.6 and earlier allows local users ...bullseye, jessie, sid, stretch
CVE-2008-7258bullseye, jessie, sid, stretch
stalinCVE-2015-8697stalin 0.11-5 allows local users to write to arbitrary files. ...bullseye, buster, jessie, sid, stretch
strongswanCVE-2018-5389The Internet Key Exchange v1 main mode is vulnerable to offline dictio ...bullseye, buster, jessie, sid, stretch
sudoCVE-2005-1119Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary ...bullseye, buster, jessie, sid, stretch
supervisorCVE-2019-12105** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user ca ...bullseye, buster, jessie, sid, stretch
surfCVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...bullseye, buster, jessie, sid, stretch
svgppCVE-2019-6245An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SV ...bullseye, buster, sid
CVE-2019-6247An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SV ...bullseye, buster, sid
swftoolsCVE-2017-1000174In SWFTools, an address access exception was found in swfdump swf_GetB ...jessie, stretch
CVE-2017-1000182In SWFTools, a memory leak was found in wav2swf. ...jessie, stretch
CVE-2017-1000186In SWFTools, a stack overflow was found in pdf2swf. ...jessie, stretch
CVE-2017-1000187In SWFTools, an address access exception was found in pdf2swf. FoFiTru ...jessie, stretch
CVE-2017-10976When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead t ...jessie, stretch
CVE-2017-11096When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lea ...jessie, stretch
CVE-2017-11097When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a ...jessie, stretch
CVE-2017-11098When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead t ...jessie, stretch
CVE-2017-11099When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead t ...jessie, stretch
CVE-2017-11100When SWFTools 0.9.2 processes a crafted file in swfextract, it can lea ...jessie, stretch
CVE-2017-11101When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lea ...jessie, stretch
CVE-2017-16711The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c ...jessie, stretch
CVE-2017-16794The png_load function in lib/png.c in SWFTools 0.9.2 does not properly ...jessie, stretch
CVE-2017-16796In SWFTools 0.9.2, the png_load function in lib/png.c does not check t ...jessie, stretch
CVE-2017-16868In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not ...jessie, stretch
CVE-2017-16890SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono func ...jessie, stretch
CVE-2017-8401In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the ...jessie, stretch
CVE-2017-8420SWFTools 2013-04-09-1007 on Windows has a "Data from Faulting Address ...jessie, stretch
CVE-2017-9924In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attacker ...jessie, stretch
CVE-2017-9925In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attacker ...jessie, stretch
CVE-2017-9926In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attacker ...jessie, stretch
CVE-2017-9927In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attacker ...jessie, stretch
swi-prologCVE-2017-17524library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings b ...bullseye, buster, jessie, sid, stretch
sylpheedCVE-2007-1267Sylpheed 2.2.7 and earlier does not properly use the --status-fd argum ...bullseye, buster, jessie, sid, stretch
CVE-2017-17517libsylph/utils.c in Sylpheed through 3.6 does not validate strings bef ...bullseye, buster, jessie, sid, stretch
symfonyCVE-2017-18343** DISPUTED ** The debug handler in Symfony before v2.7.33, 2.8.x befo ...jessie, stretch
CVE-2018-12040** DISPUTED ** Reflected Cross-site scripting (XSS) vulnerability in t ...jessie, stretch
systemdCVE-2013-4392systemd, when updating file permissions, allows local users to change ...bullseye, buster, jessie, sid, stretch
CVE-2017-1000082systemd v233 and earlier fails to safely parse usernames starting with ...stretch
CVE-2017-18078systemd-tmpfiles in systemd before 237 attempts to support ownership/p ...stretch
sysvinitTEMP-0517018-A83CE6sysvinit: no-root option in expert installer exposes locally exploitable security flawbullseye, buster, jessie, sid, stretch
t1utilsTEMP-0868134-294030out-of-bounds read in eexec_line()stretch
tarCVE-2005-2541Tar 1.15.1 does not properly warn the user when extracting setuid or s ...bullseye, buster, jessie, sid, stretch
CVE-2019-9923pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointe ...bullseye, buster, jessie, sid, stretch
TEMP-0290435-0B57B5tar's rmt command may have undesired side effectsbullseye, buster, jessie, sid, stretch
tccCVE-2018-20374An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. ...bullseye, buster, jessie, sid, stretch
CVE-2018-20375An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. ...bullseye, buster, jessie, sid, stretch
CVE-2018-20376An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. ...bullseye, buster, jessie, sid, stretch
tcpdumpCVE-2017-16808tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_ ...jessie, stretch
CVE-2018-19519In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_p ...bullseye, buster, jessie, sid, stretch
CVE-2019-1010220tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. T ...bullseye, buster, jessie, sid, stretch
tcpflowCVE-2018-18409A stack-based buffer over-read exists in setbit() at iptree.h of TCPFL ...jessie, stretch
tcpreplayCVE-2019-8376An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference ...buster, jessie, stretch
CVE-2019-8377An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference ...buster, jessie, stretch
CVE-2019-8381An issue was discovered in Tcpreplay 4.3.1. An invalid memory access o ...buster, jessie, stretch
telegram-desktopCVE-2018-17231** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow atta ...bullseye, buster, sid
CVE-2018-17613Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enab ...bullseye, buster, sid
texlive-baseCVE-2017-17513TeX Live through 20170524 does not validate strings before launching t ...bullseye, buster, jessie, sid, stretch
texlive-binCVE-2016-10243TeX Live allows remote attackers to execute arbitrary commands by leve ...bullseye, buster, jessie, sid, stretch
CVE-2017-17513TeX Live through 20170524 does not validate strings before launching t ...bullseye, buster, jessie, sid, stretch
thrift-compilerCVE-2016-5397The Apache Thrift Go client library exposed the potential during code ...jessie, stretch
thunarCVE-2018-18398Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey ...bullseye, buster, jessie, sid, stretch
TEMP-0517020-915121thunar: potential exploits via application launchersbullseye, buster, jessie, sid, stretch
thunderbirdCVE-2019-11719When importing a curve25519 private key in PKCS#8format with leading 0 ...jessie
CVE-2019-11729Empty or malformed p256-ECDH public keys may trigger a segmentation fa ...jessie
tiffCVE-2010-2596The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2 ...jessie
CVE-2014-8127LibTIFF 4.0.3 allows remote attackers to cause a denial of service (ou ...jessie
CVE-2014-8130The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not rejec ...bullseye, buster, jessie, sid, stretch
CVE-2016-10268tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a den ...jessie
CVE-2016-9539tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readCon ...jessie
CVE-2017-16232** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, ...bullseye, buster, jessie, sid, stretch
CVE-2017-17095tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to ...jessie
CVE-2017-17973** DISPUTED ** In LibTIFF 4.0.8, there is a heap-based use-after-free ...bullseye, buster, jessie, sid, stretch
CVE-2017-5563LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read i ...bullseye, buster, jessie, sid, stretch
CVE-2017-9117In LibTIFF 4.0.7, the program processes BMP images without verifying t ...bullseye, buster, jessie, sid, stretch
CVE-2018-10126LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 fu ...bullseye, buster, jessie, sid, stretch
CVE-2018-18661An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dere ...jessie, stretch
CVE-2019-6128The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory l ...jessie, stretch
TEMP-0846838-9738BDtiffcrop: divide-by-zero in readSeparateStripsIntoBuffer when BitsPerSample is missingjessie
timidityCVE-2017-11546The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allo ...jessie, stretch
CVE-2017-11547The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows ...jessie, stretch
CVE-2017-11549The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remot ...bullseye, buster, jessie, sid, stretch
tinCVE-2017-17520** DISPUTED ** tools/url_handler.pl in TIN 2.4.1 does not validate str ...bullseye, buster, jessie, sid, stretch
tinymuxCVE-2007-1959Unspecified vulnerability in the process_cmdent function in command.cp ...bullseye, buster, jessie, sid, stretch
tinyxml2CVE-2018-11210** DISPUTED ** TinyXML2 6.2.0 has a heap-based buffer over-read in the ...bullseye, buster, jessie, sid, stretch
tomcat7CVE-2012-5568Apache Tomcat through 7.0.x allows remote attackers to cause a denial ...jessie, stretch
torCVE-2006-6893Tor allows remote attackers to discover the IP address of a hidden ser ...bullseye, buster, jessie, sid, stretch
CVE-2007-1103Tor does not verify a node's uptime and bandwidth advertisements, whic ...bullseye, buster, jessie, sid, stretch
CVE-2009-0654Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attacke ...bullseye, buster, jessie, sid, stretch
transfigCVE-2018-16140A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3. ...jessie
CVE-2019-14275Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arro ...jessie
twigCVE-2018-13818** DISPUTED ** Twig before 2.4.4 allows Server-Side Template Injection ...jessie, stretch
twistedCVE-2016-1000111bullseye, buster, jessie, sid, stretch
u-bootCVE-2017-3225Das U-Boot is a device bootloader that can read its configuration from ...bullseye, buster, jessie, sid, stretch
CVE-2017-3226Das U-Boot is a device bootloader that can read its configuration from ...bullseye, buster, jessie, sid, stretch
CVE-2018-1000205U-Boot contains a CWE-20: Improper Input Validation vulnerability in V ...bullseye, buster, jessie, sid, stretch
CVE-2018-18439DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer over ...bullseye, buster, jessie, sid, stretch
CVE-2018-18440DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overf ...bullseye, buster, jessie, sid, stretch
uclibcCVE-2016-2224The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before ...bullseye, buster, jessie, sid, stretch
CVE-2016-2225The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng bef ...bullseye, buster, jessie, sid, stretch
CVE-2016-6264Integer signedness error in libc/string/arm/memset.S in uClibc and uCl ...bullseye, buster, jessie, sid, stretch
CVE-2017-9728In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp f ...bullseye, buster, jessie, sid, stretch
CVE-2017-9729In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) ...bullseye, buster, jessie, sid, stretch
ufrawCVE-2018-19655A stack-based buffer overflow in the find_green() function of dcraw th ...jessie, stretch
uglifyjsCVE-2015-8857The uglify-js package before 2.4.24 for Node.js does not properly acco ...bullseye, buster, jessie, sid, stretch
CVE-2015-8858The uglify-js package before 2.6.0 for Node.js allows attackers to cau ...jessie
unboundCVE-2019-18934Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec modul ...bullseye, buster, sid
unixodbcCVE-2012-2657jessie, stretch
CVE-2012-2658jessie, stretch
unrar-freeCVE-2017-11189unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a ...bullseye, buster, jessie, sid, stretch
CVE-2017-11190unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might ...bullseye, buster, jessie, sid, stretch
CVE-2017-14121The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free ...jessie, stretch
CVE-2017-14122unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based b ...jessie, stretch
upx-uclCVE-2017-15056p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote a ...jessie, stretch
CVE-2017-16869** DISPUTED ** p_mach.cpp in UPX 3.94 allows remote attackers to cause ...jessie, stretch
CVE-2019-14295An Integer overflow in the getElfSections function in p_vmlinx.cpp in ...buster, jessie, stretch
CVE-2019-14296canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause ...buster, jessie, stretch
util-linuxCVE-2015-5218Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before ...jessie
CVE-2015-5224The mkostemp function in login-utils in util-linux when used incorrect ...jessie
CVE-2017-2616A race condition was found in util-linux before 2.32.1 in the way su h ...jessie
TEMP-0786804-C23D2Bhwclock(8) SUID privilege escalationjessie
uzblCVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...jessie, stretch
varnishCVE-2009-4488** DISPUTED ** Varnish 2.0.6 writes data to a log file without sanitiz ...bullseye, buster, jessie, sid, stretch
vimCVE-2008-4677autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions ...bullseye, buster, jessie, sid, stretch
CVE-2017-1000382VIM version 8.0.1187 (and other versions most likely) ignores umask wh ...bullseye, buster, jessie, sid, stretch
vinoCVE-2011-1164Vino before 2.99.4 can connect external networks contrary to the state ...bullseye, buster, jessie, sid, stretch
CVE-2011-1165Vino, possibly before 3.2, does not properly document that it opens po ...bullseye, buster, jessie, sid, stretch
vnc4CVE-2014-0011ZRLE decoding bounds checking issuejessie
CVE-2015-2305Integer overflow in the regcomp implementation in the Henry Spencer BS ...jessie
vorbis-toolsCVE-2017-11331The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 ...bullseye, buster, jessie, sid, stretch
vteCVE-2005-0023gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to sp ...bullseye, buster, jessie, sid, stretch
w3mCVE-2018-6198w3m through 0.5.3 does not properly handle temporary files when the ~/ ...jessie
TEMP-0532514-9137E0predictable random number generator used in web browsersbullseye, buster, jessie, sid, stretch
web2pyCVE-2013-6837Cross-site scripting (XSS) vulnerability in the setTimeout function in ...jessie
webkit2gtkCVE-2015-7096WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9 ...jessie
CVE-2015-7098WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9 ...jessie
CVE-2016-4590WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles ab ...jessie
CVE-2016-4591WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before ...jessie
CVE-2016-4622WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before ...jessie
CVE-2016-4624WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before ...jessie
CVE-2016-4692An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-4743An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7586An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7587An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7589An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7592An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7598An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7599An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7610An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7611An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7623An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7632An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7635An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7639An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7640An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7641An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7642An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7645An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7646An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7648An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7649An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7652An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7654An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2016-7656An issue was discovered in certain Apple products. iOS before 10.2 is ...jessie
CVE-2017-1000121The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, do ...jessie
CVE-2017-1000122The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, do ...jessie
CVE-2017-13783An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13784An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13785An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13788An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13791An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13792An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13793An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13794An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13795An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13796An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13798An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13802An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13803An issue was discovered in certain Apple products. iOS before 11.1 is ...jessie
CVE-2017-13856An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-13866An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-13870An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-13884An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-13885An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-17821WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology ...jessie, stretch
CVE-2017-2350An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2354An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2355An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2356An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2362An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2363An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2364An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2365An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2366An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2369An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2371An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2373An issue was discovered in certain Apple products. iOS before 10.2.1 i ...jessie
CVE-2017-2376An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2377An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2386An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2392An issue was discovered in certain Apple products. Safari before 10.1 ...jessie
CVE-2017-2394An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2395An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2396An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2405An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2415An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2419An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2424An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2433An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2442An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2445An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2446An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2447An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2454An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2455An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2457An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2459An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2460An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2464An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2465An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2466An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2468An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2469An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2470An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2471An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2475An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2476An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2481An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie
CVE-2017-2496An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2504An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2505An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2506An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2508An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2510An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2514An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2515An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2521An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2525An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2526An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2528An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2530An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2531An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2536An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2538An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2539An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2544An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2547An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-2549An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-6980An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-6984An issue was discovered in certain Apple products. iOS before 10.3.2 i ...jessie
CVE-2017-7006An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7011An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7012An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7018An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7019An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7020An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7030An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7034An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7037An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7038A DOMParser XSS issue was discovered in certain Apple products. iOS be ...jessie
CVE-2017-7039An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7040An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7041An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7042An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7043An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7046An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7048An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7049An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7052An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7055An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7056An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7059A DOMParser XSS issue was discovered in certain Apple products. iOS be ...jessie
CVE-2017-7061An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7064An issue was discovered in certain Apple products. iOS before 10.3.3 i ...jessie
CVE-2017-7081An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7087An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7089An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7090An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7091An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7092An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7093An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7094An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7095An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7096An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7098An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7099An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7100An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7102An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7104An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7107An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7109An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7111An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7117An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7120An issue was discovered in certain Apple products. iOS before 11 is af ...jessie
CVE-2017-7142An issue was discovered in certain Apple products. Safari before 11 is ...jessie
CVE-2017-7153An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-7156An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-7157An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-7160An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2017-7161An issue was discovered in certain Apple products. Safari before 11.0. ...jessie
CVE-2017-7165An issue was discovered in certain Apple products. iOS before 11.2 is ...jessie
CVE-2018-11646webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIco ...jessie, stretch
CVE-2018-11712WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the li ...jessie, stretch
CVE-2018-11713WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the li ...jessie, stretch
CVE-2018-12293The getImageData function in the ImageBufferCairo class in WebCore/pla ...jessie, stretch
CVE-2018-12294WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as ...jessie, stretch
CVE-2018-12911WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bou ...jessie, stretch
CVE-2018-4088An issue was discovered in certain Apple products. iOS before 11.2.5 i ...jessie
CVE-2018-4089An issue was discovered in certain Apple products. iOS before 11.2.5 i ...jessie
CVE-2018-4096An issue was discovered in certain Apple products. iOS before 11.2.5 i ...jessie
CVE-2018-4101An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4113An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4114An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4117An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4118An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4119An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4120An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4121An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4122An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4125An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4127An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4128An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4129An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4133An issue was discovered in certain Apple products. Safari before 11.1 ...jessie, stretch
CVE-2018-4146An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4161An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4162An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4163An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4165An issue was discovered in certain Apple products. iOS before 11.3 is ...jessie, stretch
CVE-2018-4190An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4191A memory corruption issue was addressed with improved validation. This ...jessie, stretch
CVE-2018-4192An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4197A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4199An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4200An issue was discovered in certain Apple products. iOS before 11.3.1 i ...jessie, stretch
CVE-2018-4201An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4204An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4207In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, ...jessie, stretch
CVE-2018-4208In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, ...jessie, stretch
CVE-2018-4209In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, ...jessie, stretch
CVE-2018-4210In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS befo ...jessie, stretch
CVE-2018-4212In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, ...jessie, stretch
CVE-2018-4213In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, ...jessie, stretch
CVE-2018-4214An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4218An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4222An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4232An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4233An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4246An issue was discovered in certain Apple products. iOS before 11.4 is ...jessie, stretch
CVE-2018-4261Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4262In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11 ...jessie, stretch
CVE-2018-4263Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4264Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4265Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4266A race condition was addressed with additional validation. This issue ...jessie, stretch
CVE-2018-4267Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4270A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2018-4271Multiple memory corruption issues were addressed with improved input v ...jessie, stretch
CVE-2018-4272Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4273Multiple memory corruption issues were addressed with improved input v ...jessie, stretch
CVE-2018-4278In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11 ...jessie, stretch
CVE-2018-4284A type confusion issue was addressed with improved memory handling. Th ...jessie, stretch
CVE-2018-4299Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4306A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4309A cross-site scripting issue existed in Safari. This issue was address ...jessie, stretch
CVE-2018-4311The issue was addressed by removing origin information. This issue aff ...jessie, stretch
CVE-2018-4312A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4314A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4315A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4316A memory corruption issue was addressed with improved state management ...jessie, stretch
CVE-2018-4317A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4318A use after free issue was addressed with improved memory management. ...jessie, stretch
CVE-2018-4319A cross-origin issue existed with "iframe" elements. This was addresse ...jessie, stretch
CVE-2018-4323Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4328Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4345A cross-site scripting issue existed in Safari. This issue was address ...jessie, stretch
CVE-2018-4358Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4359Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4361A memory consumption issue was addressed with improved memory handling ...jessie, stretch
CVE-2018-4372Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4373Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4375Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4376Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4378A memory corruption issue was addressed with improved validation. This ...jessie, stretch
CVE-2018-4382Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4386Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4392Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4416Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4437Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2018-4438A logic issue existed resulting in memory corruption. This was address ...jessie, stretch
CVE-2018-4441A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2018-4442A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2018-4443A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2018-4464Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2019-6212Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2019-6215A type confusion issue was addressed with improved memory handling. Th ...jessie, stretch
CVE-2019-6216Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2019-6217Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2019-6226Multiple memory corruption issues were addressed with improved memory ...jessie, stretch
CVE-2019-6227A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2019-6229A logic issue was addressed with improved validation. This issue is fi ...jessie, stretch
CVE-2019-6233A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2019-6234A memory corruption issue was addressed with improved memory handling. ...jessie, stretch
CVE-2019-8375The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.9 ...jessie, stretch
webkitgtkCVE-2016-10222runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in ...jessie, stretch
CVE-2016-10226JavaScriptCore in WebKit, as distributed in Safari Technology Preview ...jessie, stretch
CVE-2016-1856WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tv ...jessie, stretch
CVE-2016-1857WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tv ...jessie, stretch
CVE-2016-4657WebKit in Apple iOS before 9.3.5 allows remote attackers to execute ar ...jessie, stretch
CVE-2016-9642JavaScriptCore in WebKit allows attackers to cause a denial of service ...jessie, stretch
CVE-2016-9643The regex code in Webkit 2.4.11 allows remote attackers to cause a den ...jessie, stretch
CVE-2017-2367An issue was discovered in certain Apple products. iOS before 10.3 is ...jessie, stretch
CVE-2017-5949JavaScriptCore in WebKit, as distributed in Safari Technology Preview ...jessie, stretch
whiteduneCVE-2017-17518** DISPUTED ** swt/motif/browser.c in White_dune (aka whitedune) 0.30. ...bullseye, buster, jessie, sid, stretch
wineTEMP-0816034-9C45DCunsafe use of /tmpjessie, stretch, jessie, stretch
wordpressCVE-2006-0733** DISPUTED ** Cross-site scripting (XSS) vulnerability in WordPress 2 ...bullseye, buster, jessie, sid, stretch
CVE-2008-0191WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive ...bullseye, buster, jessie, sid, stretch
CVE-2011-4898** DISPUTED ** wp-admin/setup-config.php in the installation component ...bullseye, buster, jessie, sid, stretch
CVE-2011-4899** DISPUTED ** wp-admin/setup-config.php in the installation component ...bullseye, buster, jessie, sid, stretch
CVE-2012-0782** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in ...bullseye, buster, jessie, sid, stretch
CVE-2012-0937** DISPUTED ** wp-admin/setup-config.php in the installation component ...bullseye, buster, jessie, sid, stretch
CVE-2012-5868WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upo ...bullseye, buster, jessie, sid, stretch
CVE-2013-7233Cross-site request forgery (CSRF) vulnerability in the retrospam compo ...bullseye, buster, jessie, sid, stretch
CVE-2017-6514WordPress 4.7.2 mishandles listings of post authors, which allows remo ...bullseye, buster, jessie, sid, stretch
CVE-2018-6389In WordPress through 4.9.2, unauthenticated attackers can cause a deni ...bullseye, buster, jessie, sid, stretch
wpaCVE-2016-10743hostapd before 2.6 does not prevent use of the low-quality PRNG that i ...stretch
CVE-2017-13084Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Sta ...bullseye, buster, jessie, sid, stretch
xbindkeys-configCVE-2014-9513Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows rem ...buster, jessie, sid, stretch
xbmcCVE-2013-1438Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in lib ...jessie
xcfaCVE-2014-5254Symlink following issuesjessie
CVE-2014-5255Insecure use of temporary file related to the /tmp/get_infos_dvd.shjessie
xchatCVE-2011-5129Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote at ...bullseye, buster, jessie, sid
xdg-user-dirsCVE-2017-15131It was found that system umask policy is not being honored when creati ...bullseye, buster, jessie, sid, stretch
xenCVE-2014-9066Xen 4.4.x and earlier, when using a large number of VCPUs, does not pr ...bullseye, buster, jessie, sid, stretch
xerces-cCVE-2012-0880Apache Xerces-C++ allows remote attackers to cause a denial of service ...bullseye, buster, jessie, sid, stretch
xfigCVE-2009-4228Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlie ...bullseye, buster, jessie, sid, stretch
xloadimageCVE-2006-4484Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in ...bullseye, buster, jessie, sid, stretch
xpdfCVE-2010-0206xpdf allows remote attackers to cause a denial of service (NULL pointe ...bullseye, buster, jessie, sid, stretch
CVE-2010-0207In xpdf, the xref table contains an infinite loop which allows remote ...bullseye, buster, jessie, sid, stretch
CVE-2013-4472The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 a ...bullseye, buster, jessie, sid, stretch
CVE-2018-11033The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in ...bullseye, buster, jessie, sid, stretch
CVE-2018-16368SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows ...bullseye, buster, jessie, sid, stretch
CVE-2018-16369XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a ...bullseye, buster, jessie, sid, stretch
CVE-2018-18454CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote atta ...bullseye, buster, jessie, sid, stretch
CVE-2018-18455The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote a ...bullseye, buster, jessie, sid, stretch
CVE-2018-18456The function Object::isName() in Object.h (called from Gfx::opSetFillC ...bullseye, buster, jessie, sid, stretch
CVE-2018-18457The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remo ...bullseye, buster, jessie, sid, stretch
CVE-2018-18458The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows r ...bullseye, buster, jessie, sid, stretch
CVE-2018-18459The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remo ...bullseye, buster, jessie, sid, stretch
CVE-2018-7173A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an ...bullseye, buster, jessie, sid, stretch
CVE-2018-7174An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref a ...bullseye, buster, jessie, sid, stretch
CVE-2018-7175An issue was discovered in xpdf 4.00. A NULL pointer dereference in re ...bullseye, buster, jessie, sid, stretch
CVE-2018-7452A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc i ...bullseye, buster, jessie, sid, stretch
CVE-2018-7453Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 ...bullseye, buster, jessie, sid, stretch
CVE-2018-7454A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpd ...bullseye, buster, jessie, sid, stretch
CVE-2018-7455An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xp ...bullseye, buster, jessie, sid, stretch
CVE-2018-8100The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allo ...bullseye, buster, jessie, sid, stretch
CVE-2018-8101The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf ...bullseye, buster, jessie, sid, stretch
CVE-2018-8102The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4 ...bullseye, buster, jessie, sid, stretch
CVE-2018-8103The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf ...bullseye, buster, jessie, sid, stretch
CVE-2018-8104The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows atta ...bullseye, buster, jessie, sid, stretch
CVE-2018-8105The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allow ...bullseye, buster, jessie, sid, stretch
CVE-2018-8106The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 ...bullseye, buster, jessie, sid, stretch
CVE-2018-8107The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows atta ...bullseye, buster, jessie, sid, stretch
xtermCVE-2006-4447X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtran ...bullseye, buster, jessie, sid, stretch
yawsCVE-2009-4495Yaws 1.85 writes data to a log file without sanitizing non-printable c ...bullseye, buster, jessie, sid, stretch
yumCVE-2013-1910yum does not properly handle bad metadata, which allows an attacker to ...bullseye, buster, jessie, sid, stretch
zipCVE-2018-13410** DISPUTED ** Info-ZIP Zip 3.0, when the -T and -TT command-line opti ...bullseye, buster, jessie, sid, stretch
zophCVE-2014-9235Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Pho ...bullseye, buster, sid
CVE-2014-9236Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zop ...bullseye, buster, sid
zshCVE-2017-18205In builtin.c in zsh before 5.4, when sh compatibility mode is used, th ...jessie, stretch
CVE-2018-7548In subst.c in zsh through 5.4.2, there is a NULL pointer dereference w ...jessie, stretch
CVE-2018-7549In params.c in zsh through 5.4.2, there is a crash during a copy of an ...jessie, stretch
zziplibCVE-2018-17828Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers ...bullseye, buster, jessie, sid, stretch
CVE-2018-6542In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trail ...bullseye, buster, jessie, sid, stretch
zziplibCVE-2018-7727An issue was discovered in ZZIPlib 0.13.68. There is a memory leak tri ...bullseye, buster, jessie, sid, stretch
Search for package or bug name: Reporting problems