Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Debian_linux
(Debian)Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2019-12-04 | CVE-2013-2745 | An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0 | Debian_linux, Minidlna | N/A | ||
2019-12-03 | CVE-2013-2106 | webauth before 4.6.1 has authentication credential disclosure | Debian_linux, Webauth | N/A | ||
2019-11-25 | CVE-2012-5521 | quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal | Debian_linux, Quagga, Enterprise_linux | N/A | ||
2019-12-05 | CVE-2012-1115 | A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. | Debian_linux, Fedora, Ldap_account_manager | N/A | ||
2019-11-26 | CVE-2011-1939 | SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6. | Debian_linux, Php, Zend_framework | N/A | ||
2019-11-26 | CVE-2011-1934 | lilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1. | Debian_linux, Lilo | N/A | ||
2019-11-20 | CVE-2019-3466 | The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation. | Ubuntu_linux, Debian_linux, Postgresql\-Common | N/A | ||
2019-03-21 | CVE-2018-20340 | Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey. | Debian_linux, Libu2f\-Host | 6.8 | ||
2019-12-03 | CVE-2013-7325 | An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball. | Debian_linux, Devscripts | N/A | ||
2019-11-29 | CVE-2014-3591 | Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication. | Debian_linux, Gnupg, Libgcrypt | N/A |