debian debian linux 10.0 vulnerabilities and exploits

(subscribe to this query)

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Gnome Grilo Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

There is a possible heap overflow in libclamav/fsg.c prior to 0.100.0.

Clamav Clamav Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

offlineimap prior to 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Offlineimap Offlineimap

An integer overflow condition in poppler prior to 0.16.3 can occur when parsing CharCodes for fonts.

Freedesktop Poppler Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

An issue exists in Suricata prior to 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP ...

Oisf Suricata Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

webauth prior to 4.6.1 has authentication credential disclosure

Stanford Webauth Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

LTSP LDM up to and including 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script.

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Ltsp Ldm

In Apache SpamAssassin prior to 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.

Apache Spamassassin Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show the correct file exten...

Mozilla Thunderbird Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.

Teluu Pjsip Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook