Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian most vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2022-2068
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not dis...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Siemens Sinec Ins 1.0Siemens Sinec InsNetapp Santricity Smi-s Provider -Netapp Element Software -Netapp Ontap Select Deploy Administration Utility -Netapp Smi-s Provider -Netapp Solidfire -Netapp Hci Management Node -Netapp Snapmanager -Netapp Ontap Antivirus Connector -Netapp Bootstrap Os -Netapp H615c Firmware -Netapp H610s Firmware -Netapp H610c Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -
10
CVSSv2
CVE-2022-1292
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Snapmanager -Netapp A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -
10
CVSSv2
CVE-2022-0543
It exists, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
Redis Redis -
10
CVSSv2
CVE-2022-23221
H2 Console prior to 2.1.210 allows remote malicious users to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.
H2database H2Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Communications Cloud Native Core Console 1.9.0
10
CVSSv2
CVE-2021-42392
The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited thr...
H2database H2Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Communications Cloud Native Core Policy 1.15.0
10
CVSSv2
CVE-2016-1253
The most package in Debian wheezy prior to 5.0.0a-2.2, in Debian jessie prior to 5.0.0a-2.3+deb8u1, and in Debian unstable prior to 5.0.0a-3 allows remote malicious users to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file.
Debian Most
10
CVSSv2
CVE-2006-3738
Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 prior to 0.9.7l, 0.9.8 prior to 0.9.8d, and previous versions versions has unspecified impact and remote attack vectors involving a long list of ciphers.
Openssl Openssl 0.9.7Openssl Openssl 0.9.7gOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.8
10
CVSSv2
CVE-2004-0980
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 up to and including 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.
Angus Mackay Ez-ipupdate 3.0.11b5Angus Mackay Ez-ipupdate 3.0.11b8Debian Debian Linux 3.0Gentoo Linux
10
CVSSv2
CVE-2003-0209
Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and previous versions allows remote malicious users to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.
Sourcefire Snort 1.8.5Sourcefire Snort 1.8.6Smoothwall Smoothwall 2.0 Beta 4Sourcefire Snort 1.8Sourcefire Snort 1.8.7Sourcefire Snort 1.9Sourcefire Snort 1.8.1Sourcefire Snort 1.8.2Sourcefire Snort 1.9.1Sourcefire Snort 1.8.3Sourcefire Snort 1.8.4
10
CVSSv2
CVE-2003-0033
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x prior to 1.9.1 allows remote malicious users to execute arbitrary code via fragmented RPC packets.
Snort Snort 1.8.0Snort Snort 1.8.7Snort Snort 1.9.0Snort Snort 1.8.5Snort Snort 1.8.6Snort Snort 1.8.1Snort Snort 1.8.2Snort Snort 1.8.3Snort Snort 1.8.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook