Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: debian'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2015-1165 5.0 RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors. 2015-10-28 02:16:00
CVE-2014-0471 5.0 Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quotin 2015-10-16 14:53:00
CVE-2015-0885 5.0 checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username. 2015-09-24 16:46:00
CVE-2015-6587 4.0 The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC. 2015-09-02 18:15:00
CVE-2015-6525 7.5 Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) 2015-08-26 02:56:00
CVE-2015-0971 5.0 The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates. 2015-05-15 15:13:00
CVE-2015-0838 7.5 Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file. 2015-04-01 03:09:00
CVE-2014-5033 6.9 KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a ( 2014-10-16 07:22:00
CVE-2014-4510 4.3 Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. 2014-10-08 01:37:00
CVE-2014-3227 6.4 dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which triggers an intera 2014-06-24 15:55:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/939
Zapisa po stranici: