debian debian linux 7.0 vulnerabilities and exploits

(subscribe to this query)

An issue exists in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform command inje...

Zmanda Amanda 3.3.1 Redhat Enterprise Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

sot/source/sdstor/stgstrms.cxx in LibreOffice prior to 5.4.5.1 and 6.x prior to 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote malicious users to cause a denial of service (use-after-free with write access) or possibly have unspecified ...

Libreoffice Libreoffice Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice prior to 5.4.6.1 and 6.x prior to 6.0.2.1 does not validate a customizations index, which allows remote malicious users to cause a denial of service (heap-based buffer overflow with write access...

Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Libreoffice Libreoffice Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

The Debian build procedure for the smokeping package in wheezy prior to 2.6.8-2+deb7u1 and jessie prior to 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote malicious users to execute arbitrary code via crafted ...

Debian Debian Linux 8.0 Debian Debian Linux 7.0

Heap-based buffer overflow in dnsmasq prior to 2.78 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Debian Debian Linux 7.1 Debian Debian Linux 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.04 Debian Debian Linux 9.0 Thekelleys Dnsmasq

1 EDB exploit

Memory leak in dnsmasq prior to 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote malicious users to cause a denial of service (memory consumption) via vectors involving DNS response creation.

Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Debian Debian Linux 7.1 Debian Debian Linux 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.04 Debian Debian Linux 9.0 Thekelleys Dnsmasq

1 EDB exploit

An issue exists in uscan in devscripts prior to 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball.

Debian Devscripts Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

GnuTLS incorrectly validates the first byte of padding in CBC modes

Gnu Gnutls Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

wp-includes/functions.php in WordPress prior to 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote malicious users to conduct XSS attacks via a crafted file.

Wordpress Wordpress Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

wp-includes/general-template.php in WordPress prior to 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow malicious users to conduct XSS attacks via the language setting of a site.

Wordpress Wordpress Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook