debian debian linux 10.0 vulnerabilities and exploits

(subscribe to this query)

Perdition prior to 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers not being applied to STARTTLS connections

Horms Perdition Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users t...

Teluu Pjsip Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

XFCE 4.16 allows malicious users to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.

Xfce Exo Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

WordPress prior to 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.

Wordpress Wordpress Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

WordPress prior to 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.

Wordpress Wordpress Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

NetworkManager 0.9 and previous versions allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Gnome Networkmanager Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 EDB exploit

coders/psd.c in ImageMagick allows remote malicious users to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.

Imagemagick Imagemagick Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

The $smarty.template variable in Smarty3 allows malicious users to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.

Smarty Smarty Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

asterisk allows calls on prohibited networks

Sangoma Asterisk Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

offlineimap prior to 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Offlineimap Offlineimap

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook