Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian debian linux 8.0 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI...
Debian Debian Linux 8.0Debian Debian Linux 7.0
6.1
CVSSv3
CVE-2017-18121
The consentAdmin module in SimpleSAMLphp through 1.14.15 is vulnerable to a Cross-Site Scripting attack, allowing an attacker to craft links that could execute arbitrary JavaScript code on the victim's web browser....
Simplesamlphp SimplesamlphpDebian Debian Linux 7.0Debian Debian Linux 9.0Debian Debian Linux 8.0
4.7
CVSSv3
CVE-2017-6932
Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly...
Drupal DrupalDebian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0
9.8
CVSSv3
CVE-2017-1000421
Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution...
Lcdf GifsicleDebian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0
5.5
CVSSv3
CVE-2005-2351
Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files....
Mutt MuttDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 8.0
6.5
CVSSv3
CVE-2010-4653
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts....
Freedesktop PopplerDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
6.1
CVSSv3
CVE-2013-7371
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)...
Sencha ConnectDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
9.8
CVSSv3
CVE-2011-4120
Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM configuration. A remote attacker could use this flaw to circumvent common...
Yubico Pam ModuleDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
5.5
CVSSv3
CVE-2013-0326
OpenStack nova base images permissions are world readable...
Openstack Nova -Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
9.8
CVSSv3
CVE-2011-1028
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file....
Smarty SmartyDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49372CVE-2023-49103encryptionCVE-2023-42917CVE-2023-42574CVE-2023-42568CVE-2023-42570brute forcedenial of service
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook