Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Debian_linux
(Debian)Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2008-05-05 | CVE-2008-2079 | MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future. | Ubuntu_linux, Debian_linux, Mysql, Mysql | N/A | ||
2008-01-10 | CVE-2008-0226 | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp. | Mac_os_x, Ubuntu_linux, Debian_linux, Mysql, Mysql, Yassl | N/A | ||
2004-11-03 | CVE-2004-0836 | Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length). | Debian_linux, Mysql | N/A | ||
2019-12-17 | CVE-2012-2237 | Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript innerHTML as used when generating login forms, (2) links or (3) resources URLs, and (4) the Display name in a user profile. | Debian_linux, Mahara | N/A | ||
2019-12-15 | CVE-2014-8650 | python-requests-Kerberos through 0.5 does not handle mutual authentication | Debian_linux, Requests\-Kerberos | N/A | ||
2019-12-15 | CVE-2014-8561 | imagemagick 6.8.9.6 has remote DOS via infinite loop | Debian_linux, Imagemagick | N/A | ||
2019-12-15 | CVE-2014-4913 | ZF2014-03 has a potential cross site scripting vector in multiple view helpers | Debian_linux, Zend_framework | N/A | ||
2019-12-13 | CVE-2014-3495 | duplicity 0.6.24 has improper verification of SSL certificates | Debian_linux, Duplicity, Opensuse | N/A | ||
2019-12-13 | CVE-2014-2387 | Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities | Debian_linux, Opensuse, Pen | N/A | ||
2019-11-27 | CVE-2013-2625 | An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified | Debian_linux, Opensuse, Faq, Otrs_help_desk, Otrs_itsm | N/A |