| 3proxy |
fd_set -- bitmap index overflow in multiple applications
|
| a2ps-a4 |
a2ps -- insecure temporary file creation
|
| a2ps-a4 |
a2ps -- insecure command line argument handling
|
| a2ps-letter |
a2ps -- insecure temporary file creation
|
| a2ps-letter |
a2ps -- insecure command line argument handling
|
| a2ps-letterdj |
a2ps -- insecure temporary file creation
|
| a2ps-letterdj |
a2ps -- insecure command line argument handling
|
| a2ps-{a4,letter,letterdj} |
a2ps: Possible execution of shell commands as local user
|
| abiword |
abiword, koffice -- stack based buffer overflow vulnerabilities
|
| acroread |
acroread -- plug-in buffer overflow vulnerability
|
| acroread |
acroread -- insecure temporary file creation
|
| acroread |
acroread -- buffer overflow vulnerability
|
| acroread |
acroread5 -- mailListIsPdf() buffer overflow vulnerability
|
| acroread |
acroread uudecoder input validation error
|
| acroread |
Acrobat Reader handling of malformed uuencoded pdf files
|
| acroread4 |
acroread -- plug-in buffer overflow vulnerability
|
| acroread4 |
acroread -- insecure temporary file creation
|
| acroread4 |
acroread -- buffer overflow vulnerability
|
| acroread4 |
acroread5 -- mailListIsPdf() buffer overflow vulnerability
|
| acroread4 |
acroread uudecoder input validation error
|
| acroread5 |
acroread -- plug-in buffer overflow vulnerability
|
| acroread5 |
acroread -- insecure temporary file creation
|
| acroread5 |
acroread -- buffer overflow vulnerability
|
| acroread5 |
acroread5 -- mailListIsPdf() buffer overflow vulnerability
|
| acroread5 |
acroread uudecoder input validation error
|
| acroread7 |
acroread -- plug-in buffer overflow vulnerability
|
| acroread7 |
acroread -- XML External Entity vulnerability
|
| agenda-snow-libs |
xpm -- image decoding vulnerabilities
|
| alsaplayer |
alsaplayer -- multiple vulnerabilities
|
| amaya |
amaya -- Attribute Value Buffer Overflow Vulnerabilities
|
| anubis |
GNU Anubis buffer overflows and format string vulnerabilities
|
| apache |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache |
apache -- mod_imap cross-site scripting flaw
|
| apache |
apache -- Certificate Revocation List (CRL) off-by-one vulnerability
|
| apache |
apache -- http request smuggling
|
| apache |
apache2 multiple space header denial-of-service vulnerability
|
| apache |
apache mod_include buffer overflow vulnerability
|
| apache |
apache2 -- SSL remote DoS
|
| apache |
apache -- heap overflow in mod_proxy
|
| apache |
apache -- apr_uri_parse IPv6 address handling vulnerability
|
| apache |
mod_dav -- lock related denial-of-service
|
| apache |
apache -- ap_resolve_env buffer overflow
|
| apache |
Apache 2 mod_ssl denial-of-service
|
| apache |
Apache 1.3 IP address access control failure on some 64-bit platforms
|
| apache |
Apache input header folding DoS vulnerability
|
| apache |
mod_proxy buffer overflow (CAN-2004-0492)
|
| apache |
mod_ssl stack-based buffer overflow
|
| apache |
potential security flaws in mod_ssl
|
| apache+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+ipv6 |
apache -- http request smuggling
|
| apache+ipv6 |
apache mod_include buffer overflow vulnerability
|
| apache+mod_perl |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_perl |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_perl |
apache -- http request smuggling
|
| apache+mod_perl |
apache mod_include buffer overflow vulnerability
|
| apache+mod_ssl |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl |
apache -- http request smuggling
|
| apache+mod_ssl |
apache mod_include buffer overflow vulnerability
|
| apache+mod_ssl |
mod_ssl -- SSLCipherSuite bypass
|
| apache+mod_ssl |
apache13-modssl -- format string vulnerability in proxy support
|
| apache+mod_ssl |
Apache 1.3 IP address access control failure on some 64-bit platforms
|
| apache+mod_ssl* |
mod_proxy buffer overflow (CAN-2004-0492)
|
| apache+mod_ssl* |
mod_ssl stack-based buffer overflow
|
| apache+mod_ssl* |
mod_ssl format string vulnerability
|
| apache+mod_ssl+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+ipv6 |
apache -- http request smuggling
|
| apache+mod_ssl+ipv6 |
apache mod_include buffer overflow vulnerability
|
| apache+mod_ssl+ipv6 |
mod_ssl -- SSLCipherSuite bypass
|
| apache+mod_ssl+ipv6 |
apache13-modssl -- format string vulnerability in proxy support
|
| apache+mod_ssl+mod_accel |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_accel |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_accel |
apache -- http request smuggling
|
| apache+mod_ssl+mod_accel+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_accel+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_accel+ipv6 |
apache -- http request smuggling
|
| apache+mod_ssl+mod_accel+mod_deflate |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_accel+mod_deflate |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_accel+mod_deflate |
apache -- http request smuggling
|
| apache+mod_ssl+mod_accel+mod_deflate+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_accel+mod_deflate+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_accel+mod_deflate+ipv6 |
apache -- http request smuggling
|
| apache+mod_ssl+mod_deflate |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_deflate |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_deflate |
apache -- http request smuggling
|
| apache+mod_ssl+mod_deflate+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_deflate+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_deflate+ipv6 |
apache -- http request smuggling
|
| apache+mod_ssl+mod_snmp |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_snmp |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_snmp |
apache -- http request smuggling
|
| apache+mod_ssl+mod_snmp+mod_accel |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_snmp+mod_accel |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_snmp+mod_accel |
apache -- http request smuggling
|
| apache+mod_ssl+mod_snmp+mod_accel+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_snmp+mod_accel+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_snmp+mod_accel+ipv6 |
apache -- http request smuggling
|
| apache+mod_ssl+mod_snmp+mod_accel+mod_deflate+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_snmp+mod_accel+mod_deflate+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_snmp+mod_accel+mod_deflate+ipv6 |
apache -- http request smuggling
|
| apache+mod_ssl+mod_snmp+mod_deflate |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_snmp+mod_deflate |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_snmp+mod_deflate |
apache -- http request smuggling
|
| apache+mod_ssl+mod_snmp+mod_deflate+ipv6 |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+mod_ssl+mod_snmp+mod_deflate+ipv6 |
apache -- mod_imap cross-site scripting flaw
|
| apache+mod_ssl+mod_snmp+mod_deflate+ipv6 |
apache -- http request smuggling
|
| apache+ssl |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache+ssl |
apache -- mod_imap cross-site scripting flaw
|
| apache+ssl |
apache -- http request smuggling
|
| apache+ssl |
apache mod_include buffer overflow vulnerability
|
| apache+ssl |
Apache 1.3 IP address access control failure on some 64-bit platforms
|
| apache+ssl |
Apache-SSL optional client certificate vulnerability
|
| apache13+ipv6 |
apache -- heap overflow in mod_proxy
|
| apache13-modperl |
apache -- heap overflow in mod_proxy
|
| apache13-modssl |
apache -- heap overflow in mod_proxy
|
| apache13-ssl |
apache -- heap overflow in mod_proxy
|
| apache2 |
mod_ssl -- SSLCipherSuite bypass
|
| apache_fp |
apache -- mod_rewrite buffer overflow vulnerability
|
| apache_fp |
apache -- mod_imap cross-site scripting flaw
|
| apache_fp |
apache -- http request smuggling
|
| ar-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| ar-openoffice |
openoffice -- document disclosure
|
| asterisk |
asterisk -- remote heap overwrite vulnerability
|
| asterisk |
asterisk -- denial of service vulnerability, local system access
|
| asterisk |
Vulnerabilities in H.323 implementations
|
| asterisk-bristuff |
asterisk -- remote heap overwrite vulnerability
|
| awstats |
awstats -- arbitrary command execution vulnerability
|
| awstats |
awstats -- arbitrary code execution vulnerability
|
| awstats |
awstats -- arbitrary command execution
|
| awstats |
awstats -- remote command execution vulnerability
|
| axel |
axel -- remote buffer overflow
|
| b2evolution |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| base |
base -- PHP SQL injection vulnerability
|
| bidwatcher |
bidwatcher -- format string vulnerability
|
| bind |
bind8 negative cache poison attack
|
| bind84 |
bind -- buffer overrun vulnerability
|
| bind9 |
bind9 -- Denial of Service in named(8)
|
| bind9 |
bind9 -- denial of service
|
| bld |
fd_set -- bitmap index overflow in multiple applications
|
| bmon |
bmon -- unsafe set-user-ID application
|
| bnbt |
BNBT Authorization Header DoS
|
| bnc |
fd_set -- bitmap index overflow in multiple applications
|
| bnc |
bnc -- remotely exploitable buffer overflow in getnickuserhost
|
| bogofilter |
bogofilter -- heap corruption through excessively long words
|
| bogofilter |
bogofilter -- heap corruption through malformed input
|
| bogofilter |
bogofilter -- RFC 2047 decoder denial-of-service vulnerability
|
| bogofilter-qdbm |
bogofilter -- RFC 2047 decoder denial-of-service vulnerability
|
| bogofilter-tdb |
bogofilter -- RFC 2047 decoder denial-of-service vulnerability
|
| bugzilla |
bugzilla -- multiple vulnerabilities
|
| bugzilla |
bugzilla -- multiple vulnerabilities
|
| bugzilla |
bugzilla -- multiple vulnerabilities
|
| bugzilla |
bugzilla -- cross-site scripting vulnerability
|
| bzip2 |
bzip2 -- denial of service and permission race vulnerabilities
|
| ca-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| ca-openoffice |
openoffice -- document disclosure
|
| cabextract |
cabextract -- insecure directory handling
|
| cacti |
cacti -- Multiple vulnerabilities
|
| cacti |
cacti -- ADOdb "server.php" Insecure Test Script Security Issue
|
| cacti |
cacti -- multiple vulnerabilities
|
| cacti |
cacti -- potential SQL injection and cross site scripting attacks
|
| cacti |
cacti -- SQL injection
|
| cdrdao |
cdrdao -- unspecified privilege escalation vulnerability
|
| cdrtools |
cdrtools local privilege escalation
|
| cdrtools-cjk |
cdrtools local privilege escalation
|
| cdrtools-devel |
cdrtools local privilege escalation
|
| centericq |
libgadu -- multiple vulnerabilities
|
| cfengine |
cfengine -- arbitrary file overwriting vulnerability
|
| cfengine2 |
cfengine -- arbitrary file overwriting vulnerability
|
| cfengine2 |
cfengine authentication heap corruption
|
| chora |
chora: hole in the diff code that allowed malicious input
|
| citadel |
fd_set -- bitmap index overflow in multiple applications
|
| clamav |
clamav -- CHM unpacker and PE rebuilding vulnerabilities
|
| clamav |
clamav -- Multipart Nestings Denial of Service
|
| clamav |
clamav -- heap overflow vulnerability
|
| clamav |
clamav -- Freshclam HTTP Header Buffer Overflow Vulnerability
|
| clamav |
clamav -- Multiple Vulnerabilities
|
| clamav |
clamav -- possible heap overflow in the UPX code
|
| clamav |
clamav -- arbitrary code execution and DoS vulnerabilities
|
| clamav |
clamav -- multiple remote buffer overflows
|
| clamav |
clamav -- cabinet file handling DoS vulnerability
|
| clamav |
clamav -- MS-Expand file handling DoS vulnerability
|
| clamav |
clamav -- zip handling DoS vulnerability
|
| clamav |
clamav remote denial-of-service
|
| clamav-devel |
clamav -- CHM unpacker and PE rebuilding vulnerabilities
|
| clamav-devel |
clamav -- Multipart Nestings Denial of Service
|
| clamav-devel |
clamav -- heap overflow vulnerability
|
| clamav-devel |
clamav -- Freshclam HTTP Header Buffer Overflow Vulnerability
|
| clamav-devel |
clamav -- Multiple Vulnerabilities
|
| clamav-devel |
clamav -- possible heap overflow in the UPX code
|
| clamav-devel |
clamav -- arbitrary code execution and DoS vulnerabilities
|
| clamav-devel |
clamav -- multiple remote buffer overflows
|
| clamav-devel |
clamav -- cabinet file handling DoS vulnerability
|
| clamav-devel |
clamav -- MS-Expand file handling DoS vulnerability
|
| clamav-devel |
clamav -- zip handling DoS vulnerability
|
| compat5x-alpha |
openssl -- potential SSL 2.0 rollback
|
| compat5x-amd64 |
openssl -- potential SSL 2.0 rollback
|
| compat5x-i386 |
openssl -- potential SSL 2.0 rollback
|
| compat5x-sparc64 |
openssl -- potential SSL 2.0 rollback
|
| coppermine |
coppermine -- Multiple File Extensions Vulnerability
|
| coppermine |
coppermine -- "file" Local File Inclusion Vulnerability
|
| coppermine |
coppermine -- File Inclusion Vulnerabilities
|
| coppermine |
coppermine -- IP spoofing and XSS vulnerability
|
| courier |
Courier mail services: remotely exploitable buffer overflows
|
| courier-imap |
courier-imap -- format string vulnerability in debug mode
|
| courier-imap |
Courier mail services: remotely exploitable buffer overflows
|
| crossfire-server |
crossfire-server -- denial of service and remote code execution vulnerability
|
| cs-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| cs-openoffice |
openoffice -- document disclosure
|
| cscope |
cscope -- Buffer Overflow Vulnerabilities
|
| cscope |
cscope -- buffer overflow vulnerabilities
|
| cscope |
cscope -- symlink attack vulnerability
|
| cups-base |
xpdf -- disk fill DoS vulnerability
|
| cups-base |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| cups-base |
cups-base -- CUPS server remote DoS vulnerability
|
| cups-base |
cups-base -- HPGL buffer overflow vulnerability
|
| cups-base |
xpdf -- buffer overflow vulnerability
|
| cups-base |
xpdf -- integer overflow vulnerabilities
|
| cups-base |
CUPS -- local information disclosure
|
| cups-base |
cups -- print queue browser denial-of-service
|
| cups-lpr |
cups-lpr -- lppasswd multiple vulnerabilities
|
| curl |
curl -- TFTP packet buffer overflow vulnerability
|
| curl |
curl -- URL buffer overflow vulnerability
|
| curl |
curl -- authentication buffer overflow vulnerability
|
| cvs+ipv6 |
cvsbug -- race condition
|
| cvs+ipv6 |
cvs -- numerous vulnerabilities
|
| cvs+ipv6 |
multiple vulnerabilities in the cvs server code
|
| cvs+ipv6 |
CVS path validation errors
|
| cvstrac |
CVStrac remote code execution vulnerability
|
| cyrus |
Cyrus IMAP pre-authentication heap overflow vulnerability
|
| cyrus-imapd |
cyrus-imapd -- multiple buffer overflow vulnerabilities
|
| cyrus-imapd |
Cyrus IMAPd -- APPEND command uses undefined programming construct
|
| cyrus-imapd |
Cyrus IMAPd -- FETCH command out of bounds memory corruption
|
| cyrus-imapd |
Cyrus IMAPd -- PARTIAL command out of bounds memory corruption
|
| cyrus-imapd |
Cyrus IMAPd -- IMAPMAGICPLUS preauthentification overflow
|
| cyrus-imspd |
Cyrus IMSPd multiple vulnerabilities
|
| cyrus-sasl |
cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Service
|
| cyrus-sasl |
cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin
|
| cyrus-sasl |
cyrus-sasl -- dynamic library loading and set-user-ID applications
|
| dansguardian |
DansGuardian banned extension filter bypass vulnerability
|
| dante |
fd_set -- bitmap index overflow in multiple applications
|
| DarwinStreamingServer |
Darwin Streaming Server denial-of-service vulnerability
|
| dbmail{-mysql,-postgresql} |
DBMail: remote exploitable buffer overflow
|
| dbus |
dbus -- match_rule_equal() Weakness
|
| de-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| de-linux-mozillafirebird |
firefox & mozilla -- command line URL shell command injection
|
| de-linux-mozillafirebird |
firefox & mozilla -- buffer overflow vulnerability
|
| de-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| de-linux-mozillafirebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| de-linux-mozillafirebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| de-linux-mozillafirebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| de-linux-mozillafirebird |
mozilla -- privilege escalation via DOM property overrides
|
| de-linux-mozillafirebird |
mozilla -- code execution through javascript: favicons
|
| de-linux-mozillafirebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| de-linux-mozillafirebird |
mozilla -- heap buffer overflow in GIF image processing
|
| de-linux-mozillafirebird |
mozilla -- insecure temporary directory vulnerability
|
| de-linux-mozillafirebird |
mozilla -- arbitrary code execution vulnerability
|
| de-linux-mozillafirebird |
web browsers -- window injection vulnerabilities
|
| de-linux-mozillafirebird |
mozilla -- insecure permissions for some downloaded files
|
| de-linux-mozillafirebird |
mozilla -- scripting vulnerabilities
|
| de-linux-mozillafirebird |
mozilla -- users may be lured into bypassing security dialogs
|
| de-linux-mozillafirebird |
mozilla -- hostname spoofing bug
|
| de-linux-mozillafirebird |
mozilla -- BMP decoder vulnerabilities
|
| de-linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| de-linux-netscape |
firefox & mozilla -- command line URL shell command injection
|
| de-linux-netscape |
firefox & mozilla -- buffer overflow vulnerability
|
| de-linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| de-linux-netscape |
mozilla -- privilege escalation via non-DOM property overrides
|
| de-linux-netscape |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| de-linux-netscape |
mozilla -- code execution via javascript: IconURL vulnerability
|
| de-linux-netscape |
mozilla -- privilege escalation via DOM property overrides
|
| de-linux-netscape |
mozilla -- code execution through javascript: favicons
|
| de-linux-netscape |
mozilla -- javascript "lambda" replace exposes memory contents
|
| de-linux-netscape |
mozilla -- heap buffer overflow in GIF image processing
|
| de-linux-netscape |
mozilla -- insecure temporary directory vulnerability
|
| de-linux-netscape |
mozilla -- arbitrary code execution vulnerability
|
| de-linux-netscape |
web browsers -- window injection vulnerabilities
|
| de-linux-netscape |
mozilla -- insecure permissions for some downloaded files
|
| de-linux-netscape |
mozilla -- heap overflow in NNTP handler
|
| de-linux-netscape |
mozilla -- scripting vulnerabilities
|
| de-linux-netscape |
mozilla -- users may be lured into bypassing security dialogs
|
| de-linux-netscape |
mozilla -- hostname spoofing bug
|
| de-linux-netscape |
mozilla -- BMP decoder vulnerabilities
|
| de-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| de-netscape7 |
firefox & mozilla -- command line URL shell command injection
|
| de-netscape7 |
firefox & mozilla -- buffer overflow vulnerability
|
| de-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| de-netscape7 |
mozilla -- privilege escalation via non-DOM property overrides
|
| de-netscape7 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| de-netscape7 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| de-netscape7 |
mozilla -- privilege escalation via DOM property overrides
|
| de-netscape7 |
mozilla -- code execution through javascript: favicons
|
| de-netscape7 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| de-netscape7 |
mozilla -- heap buffer overflow in GIF image processing
|
| de-netscape7 |
mozilla -- insecure temporary directory vulnerability
|
| de-netscape7 |
mozilla -- arbitrary code execution vulnerability
|
| de-netscape7 |
web browsers -- window injection vulnerabilities
|
| de-netscape7 |
mozilla -- insecure permissions for some downloaded files
|
| de-netscape7 |
mozilla -- heap overflow in NNTP handler
|
| de-netscape7 |
mozilla -- scripting vulnerabilities
|
| de-netscape7 |
mozilla -- users may be lured into bypassing security dialogs
|
| de-netscape7 |
mozilla -- hostname spoofing bug
|
| de-netscape7 |
mozilla -- BMP decoder vulnerabilities
|
| de-netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| de-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| de-openoffice |
openoffice -- document disclosure
|
| dia |
dia -- XFig Import Plugin Buffer Overflow
|
| dia-gnome |
dia -- XFig Import Plugin Buffer Overflow
|
| diablo-jdk |
jdk -- jar directory traversal vulnerability
|
| diablo-jdk |
jdk/jre -- Security Vulnerability With Java Plugin
|
| diablo-jdk-freebsd6 |
jdk -- jar directory traversal vulnerability
|
| diablo-jre |
jdk/jre -- Security Vulnerability With Java Plugin
|
| dillo |
dillo -- format string vulnerability
|
| distcc |
distcc -- incorrect parsing of IP access control rules
|
| dk-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| dk-openoffice |
openoffice -- document disclosure
|
| dnrd |
dnrd -- remote buffer and stack overflow vulnerabilities
|
| dokuwiki |
dokuwiki -- multiple vulnerabilities
|
| dokuwiki |
dokuwiki -- multiple vulnerabilities
|
| dokuwiki |
dokuwiki -- multiple vulnerabilities
|
| dokuwiki |
dokuwiki -- spellchecker remote PHP code execution
|
| dokuwiki-devel |
dokuwiki -- multiple vulnerabilities
|
| dokuwiki-devel |
dokuwiki -- multiple vulnerabilities
|
| dropbear |
Dropbear DSS verification vulnerability
|
| drupal |
drupal -- multiple vulnerabilities
|
| drupal |
drupal -- HTML attribute injection
|
| drupal |
drupal -- cross site request forgeries
|
| drupal |
drupal -- multiple XSS vulnerabilities
|
| drupal |
drupal -- XSS vulnerability
|
| drupal |
drupal -- multiple vulnerabilities
|
| drupal |
drupal -- multiple vulnerabilities
|
| drupal |
drupal -- multiple vulnerabilities
|
| drupal |
drupal -- multiple vulnerabilities
|
| drupal |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| drupal |
drupal -- PHP code execution vulnerabilities
|
| drupal-pubcookie |
drupal-pubcookie -- authentication may be bypassed
|
| ecartis |
ecartis -- unauthorised access to admin interface
|
| ecartis |
ecartis buffer overflows and input validation bugs
|
| eGroupWare |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| egroupware |
egroupware -- multiple cross-site scripting (XSS) and SQL injection vulnerabilities
|
| eGroupWare |
egroupware -- arbitrary file download in JiNN
|
| el-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| el-linux-mozillafirebird |
firefox & mozilla -- command line URL shell command injection
|
| el-linux-mozillafirebird |
firefox & mozilla -- buffer overflow vulnerability
|
| el-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| el-linux-mozillafirebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| el-linux-mozillafirebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| el-linux-mozillafirebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| el-linux-mozillafirebird |
mozilla -- privilege escalation via DOM property overrides
|
| el-linux-mozillafirebird |
mozilla -- code execution through javascript: favicons
|
| el-linux-mozillafirebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| el-linux-mozillafirebird |
mozilla -- heap buffer overflow in GIF image processing
|
| el-linux-mozillafirebird |
mozilla -- insecure temporary directory vulnerability
|
| el-linux-mozillafirebird |
mozilla -- arbitrary code execution vulnerability
|
| el-linux-mozillafirebird |
web browsers -- window injection vulnerabilities
|
| el-linux-mozillafirebird |
mozilla -- insecure permissions for some downloaded files
|
| el-linux-mozillafirebird |
mozilla -- scripting vulnerabilities
|
| el-linux-mozillafirebird |
mozilla -- users may be lured into bypassing security dialogs
|
| el-linux-mozillafirebird |
mozilla -- hostname spoofing bug
|
| el-linux-mozillafirebird |
mozilla -- BMP decoder vulnerabilities
|
| el-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| el-openoffice |
openoffice -- document disclosure
|
| elm |
elm -- remote buffer overflow in Expires header
|
| emacs |
emacs -- movemail format string vulnerability
|
| emil |
Buffer overflows and format string bugs in Emil
|
| enscript-a4 |
enscript -- multiple vulnerabilities
|
| enscript-letter |
enscript -- multiple vulnerabilities
|
| enscript-letterdj |
enscript -- multiple vulnerabilities
|
| es-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| es-openoffice |
openoffice -- document disclosure
|
| et-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| et-openoffice |
openoffice -- document disclosure
|
| ethereal |
ethereal -- Multiple Protocol Dissector Vulnerabilities
|
| ethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal |
ethereal -- multiple vulnerabilities
|
| ethereal |
multiple vulnerabilities in ethereal
|
| ethereal |
multiple vulnerabilities in ethereal
|
| ethereal |
multiple vulnerabilities in ethereal
|
| ethereal-lite |
ethereal -- Multiple Protocol Dissector Vulnerabilities
|
| ethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| ethereal-lite |
ethereal -- multiple vulnerabilities
|
| ethereal-lite |
multiple vulnerabilities in ethereal
|
| ethereal-lite |
multiple vulnerabilities in ethereal
|
| ethereal{,-lite} |
multiple vulnerabilities in ethereal
|
| ethereal{,-lite} |
multiple vulnerabilities in ethereal
|
| evince |
evince -- Buffer Overflow Vulnerability
|
| evolution |
evolution -- remote format string vulnerabilities
|
| evolution |
evolution -- arbitrary code execution vulnerability
|
| exim |
exim -- two buffer overflow vulnerabilities
|
| exim |
exim buffer overflow when verify = header_syntax is used
|
| exim-ldap |
exim -- two buffer overflow vulnerabilities
|
| exim-ldap2 |
exim -- two buffer overflow vulnerabilities
|
| exim-ldap2 |
exim buffer overflow when verify = header_syntax is used
|
| exim-mysql |
exim -- two buffer overflow vulnerabilities
|
| exim-mysql |
exim buffer overflow when verify = header_syntax is used
|
| exim-postgresql |
exim -- two buffer overflow vulnerabilities
|
| exim-postgresql |
exim buffer overflow when verify = header_syntax is used
|
| exim-sa-exim |
exim -- two buffer overflow vulnerabilities
|
| eyeOS |
eyeOS -- multiple XSS security bugs
|
| ez-ipupdate |
ez-ipupdate -- format string vulnerability
|
| ezbounce |
ezbounce remote format string vulnerability
|
| f2c |
f2c -- insecure temporary files
|
| fcron |
fcron -- multiple vulnerabilities
|
| fetchmail |
fetchmail -- crashes when refusing a message bound for an MDA
|
| fetchmail |
fetchmail -- TLS enforcement problem/MITM attack/password exposure
|
| fetchmail |
fetchmail -- crash when bouncing a message
|
| fetchmail |
fetchmail -- null pointer dereference in multidrop mode with headerless email
|
| fetchmail |
fetchmail -- fetchmailconf local password exposure
|
| fetchmail |
fetchmail -- denial of service/crash from malicious POP3 server
|
| fetchmail |
fetchmail -- remote root/code injection from malicious POP3 server
|
| fetchmail |
fetchmail denial-of-service vulnerability
|
| fetchmail |
Fetchmail address parsing vulnerability
|
| ffmpeg |
ffmpeg -- libavcodec buffer overflow vulnerability
|
| ffmpeg-devel |
ffmpeg -- libavcodec buffer overflow vulnerability
|
| fi-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| fi-openoffice |
openoffice -- document disclosure
|
| fidogate |
fidogate -- write files as `news' user
|
| fidogate-ds |
fidogate -- write files as `news' user
|
| firefox |
mozilla -- multiple vulnerabilities
|
| firefox |
mozilla -- multiple vulnerabilities
|
| firefox |
firefox -- denial of service vulnerability
|
| firefox |
mozilla -- multiple vulnerabilities
|
| firefox |
firefox & mozilla -- multiple vulnerabilities
|
| firefox |
firefox & mozilla -- command line URL shell command injection
|
| firefox |
firefox & mozilla -- buffer overflow vulnerability
|
| firefox |
firefox & mozilla -- multiple vulnerabilities
|
| firefox |
mozilla -- privilege escalation via non-DOM property overrides
|
| firefox |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| firefox |
mozilla -- code execution via javascript: IconURL vulnerability
|
| firefox |
firefox -- PLUGINSPAGE privileged javascript execution
|
| firefox |
mozilla -- privilege escalation via DOM property overrides
|
| firefox |
mozilla -- code execution through javascript: favicons
|
| firefox |
mozilla -- javascript "lambda" replace exposes memory contents
|
| firefox |
firefox -- arbitrary code execution in sidebar panel
|
| firefox |
firefox -- arbitrary code execution from sidebar panel
|
| firefox |
mozilla -- heap buffer overflow in GIF image processing
|
| firefox |
mozilla -- insecure temporary directory vulnerability
|
| firefox |
mozilla -- arbitrary code execution vulnerability
|
| firefox |
web browsers -- window injection vulnerabilities
|
| firefox |
mozilla -- insecure permissions for some downloaded files
|
| firefox |
mozilla -- scripting vulnerabilities
|
| firefox |
mozilla -- users may be lured into bypassing security dialogs
|
| firefox |
mozilla -- hostname spoofing bug
|
| firefox |
mozilla -- BMP decoder vulnerabilities
|
| firefox |
mozilla -- multiple heap buffer overflows
|
| firefox |
mozilla -- security icon spoofing
|
| firefox |
mozilla -- NULL bytes in FTP URLs
|
| firefox |
mozilla -- built-in CA certificates may be overridden
|
| firefox |
mozilla -- SOAPParameter integer overflow
|
| firefox |
Mutiple browser frame injection vulnerability
|
| firefox |
libpng stack-based buffer overflow and other code concerns
|
| firefox |
libpng stack-based buffer overflow and other code concerns
|
| firefox |
Mozilla / Firefox user interface spoofing vulnerability
|
| firefox |
Mozilla certificate spoofing
|
| firefox |
Mozilla / Firefox user interface spoofing vulnerability
|
| firefox |
Mozilla certificate spoofing
|
| flyspray |
flyspray -- cross-site scripting vulnerabilities
|
| fr-cups-base |
cups-base -- HPGL buffer overflow vulnerability
|
| fr-cups-lpr |
cups-lpr -- lppasswd multiple vulnerabilities
|
| fr-linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| fr-linux-netscape |
firefox & mozilla -- command line URL shell command injection
|
| fr-linux-netscape |
firefox & mozilla -- buffer overflow vulnerability
|
| fr-linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| fr-linux-netscape |
mozilla -- privilege escalation via non-DOM property overrides
|
| fr-linux-netscape |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| fr-linux-netscape |
mozilla -- code execution via javascript: IconURL vulnerability
|
| fr-linux-netscape |
mozilla -- privilege escalation via DOM property overrides
|
| fr-linux-netscape |
mozilla -- code execution through javascript: favicons
|
| fr-linux-netscape |
mozilla -- javascript "lambda" replace exposes memory contents
|
| fr-linux-netscape |
mozilla -- heap buffer overflow in GIF image processing
|
| fr-linux-netscape |
mozilla -- insecure temporary directory vulnerability
|
| fr-linux-netscape |
mozilla -- arbitrary code execution vulnerability
|
| fr-linux-netscape |
web browsers -- window injection vulnerabilities
|
| fr-linux-netscape |
mozilla -- insecure permissions for some downloaded files
|
| fr-linux-netscape |
mozilla -- heap overflow in NNTP handler
|
| fr-linux-netscape |
mozilla -- scripting vulnerabilities
|
| fr-linux-netscape |
mozilla -- users may be lured into bypassing security dialogs
|
| fr-linux-netscape |
mozilla -- hostname spoofing bug
|
| fr-linux-netscape |
mozilla -- BMP decoder vulnerabilities
|
| fr-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| fr-netscape7 |
firefox & mozilla -- command line URL shell command injection
|
| fr-netscape7 |
firefox & mozilla -- buffer overflow vulnerability
|
| fr-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| fr-netscape7 |
mozilla -- privilege escalation via non-DOM property overrides
|
| fr-netscape7 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| fr-netscape7 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| fr-netscape7 |
mozilla -- privilege escalation via DOM property overrides
|
| fr-netscape7 |
mozilla -- code execution through javascript: favicons
|
| fr-netscape7 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| fr-netscape7 |
mozilla -- heap buffer overflow in GIF image processing
|
| fr-netscape7 |
mozilla -- insecure temporary directory vulnerability
|
| fr-netscape7 |
mozilla -- arbitrary code execution vulnerability
|
| fr-netscape7 |
web browsers -- window injection vulnerabilities
|
| fr-netscape7 |
mozilla -- insecure permissions for some downloaded files
|
| fr-netscape7 |
mozilla -- heap overflow in NNTP handler
|
| fr-netscape7 |
mozilla -- scripting vulnerabilities
|
| fr-netscape7 |
mozilla -- users may be lured into bypassing security dialogs
|
| fr-netscape7 |
mozilla -- hostname spoofing bug
|
| fr-netscape7 |
mozilla -- BMP decoder vulnerabilities
|
| fr-netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| fr-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| fr-openoffice |
openoffice -- document disclosure
|
| fractorama |
tiff -- buffer overflow vulnerability
|
| fractorama |
tiff -- divide-by-zero denial-of-service
|
| fractorama |
tiff -- directory entry count integer overflow vulnerability
|
| fractorama |
tiff -- multiple integer overflows
|
| fractorama |
tiff -- RLE decoder heap overflows
|
| freeamp |
zinf -- potential buffer overflow playlist support
|
| FreeBSD |
multiple vulnerabilities in the cvs server code
|
| FreeBSD |
zlib DoS vulnerability
|
| FreeBSD |
zlib DoS vulnerability
|
| freeciv |
freeciv -- Denial of Service Vulnerabilities
|
| freeciv |
freeciv -- Packet Parsing Denial of Service Vulnerability
|
| freeciv-gtk |
freeciv -- Denial of Service Vulnerabilities
|
| freeciv-gtk |
freeciv -- Packet Parsing Denial of Service Vulnerability
|
| freeciv-gtk2 |
freeciv -- Denial of Service Vulnerabilities
|
| freeciv-gtk2 |
freeciv -- Packet Parsing Denial of Service Vulnerability
|
| freeciv-nox11 |
freeciv -- Denial of Service Vulnerabilities
|
| freeciv-nox11 |
freeciv -- Packet Parsing Denial of Service Vulnerability
|
| freeradius |
freeradius -- multiple vulnerabilities
|
| freeradius |
freeradius -- authentication bypass vulnerability
|
| freeradius |
freeradius -- EAP-MSCHAPv2 Authentication Bypass
|
| freeradius |
freeradius -- sql injection and denial of service vulnerability
|
| freeradius |
freeradius -- denial-of-service vulnerability
|
| freeradius-devel |
freeradius -- sql injection and denial of service vulnerability
|
| freetype2 |
freetype -- LWFN Files Buffer Overflow Vulnerability
|
| frontpage |
frontpage -- cross site scripting vulnerability
|
| fspd |
fsp buffer overflow and directory traversal vulnerabilities
|
| fswiki |
fswiki -- XSS vulnerability
|
| fswiki |
fswiki - command injection vulnerability
|
| fswiki |
fswiki -- XSS problem in file upload form
|
| gaim |
libgadu -- multiple vulnerabilities
|
| gaim |
gaim -- AIM/ICQ non-UTF-8 filename crash
|
| gaim |
gaim -- AIM/ICQ away message buffer overflow
|
| gaim |
gaim -- Yahoo! remote crash vulnerability
|
| gaim |
gaim -- MSN Remote DoS vulnerability
|
| gaim |
gaim -- MSN remote DoS vulnerability
|
| gaim |
gaim -- remote crash on some protocols
|
| gaim |
gaim -- AIM/ICQ remote denial of service vulnerability
|
| gaim |
gaim -- remote DoS on receiving malformed HTML
|
| gaim |
gaim -- jabber remote crash
|
| gaim |
gaim -- remote DoS on receiving certain messages over IRC
|
| gaim |
gaim -- remote DoS on receiving malformed HTML
|
| gaim |
gaim -- MSN denial-of-service vulnerabilities
|
| gaim |
gaim -- MSN denial-of-service vulnerabilities
|
| gaim |
gaim -- Content-Length header denial-of-service vulnerability
|
| gaim |
gaim -- Content-Length header denial-of-service vulnerability
|
| gaim |
gaim -- multiple buffer overflows
|
| gaim |
gaim -- multiple buffer overflows
|
| gaim |
gaim -- heap overflow exploitable by malicious GroupWise server
|
| gaim |
gaim -- heap overflow exploitable by malicious GroupWise server
|
| gaim |
gaim -- malicious smiley themes
|
| gaim |
gaim -- malicious smiley themes
|
| gaim |
gaim -- buffer overflow in MSN protocol support
|
| gaim |
gaim -- buffer overflow in MSN protocol support
|
| gaim |
gaim remotely exploitable vulnerabilities in MSN component
|
| gaim |
gaim remotely exploitable vulnerabilities in MSN component
|
| gaim |
Several remotely exploitable buffer overflows in gaim
|
| gaim |
Several remotely exploitable buffer overflows in gaim
|
| gallery |
gallery -- remote code injection via HTTP_POST_VARS
|
| gallery |
gallery -- cross-site scripting
|
| gallery |
Gallery 1.4.3 and ealier user authentication bypass
|
| gallery |
Gallery arbitrary PHP file upload
|
| gallery2 |
gallery2 -- file disclosure vulnerability
|
| gatekeeper |
fd_set -- bitmap index overflow in multiple applications
|
| gd |
gd -- integer overflow
|
| gdal |
tiff -- buffer overflow vulnerability
|
| gdal |
tiff -- divide-by-zero denial-of-service
|
| gdal |
tiff -- directory entry count integer overflow vulnerability
|
| gdal |
tiff -- multiple integer overflows
|
| gdal |
tiff -- RLE decoder heap overflows
|
| gdk-pixbuf |
gdk-pixbuf -- image decoding vulnerabilities
|
| gedit |
gedit -- format string vulnerability
|
| getmail |
getmail -- symlink vulnerability during maildir delivery
|
| gforge |
gforge -- XSS and email flood vulnerabilities
|
| gforge |
gforge -- directory traversal vulnerability
|
| gftp |
gftp -- directory traversal vulnerability
|
| ghostscript-afpl |
ghostscript -- insecure temporary file creation vulnerability
|
| ghostscript-afpl-nox11 |
ghostscript -- insecure temporary file creation vulnerability
|
| ghostscript-gnu |
ghostscript -- insecure temporary file creation vulnerability
|
| ghostscript-gnu-nox11 |
ghostscript -- insecure temporary file creation vulnerability
|
| giFT-FastTrack |
Remote Denial of Service of HTTP server and client
|
| gld |
gld -- format string and buffer overflow vulnerabilities
|
| globus |
globus -- Multiple tmpfile races
|
| gnats |
gnats -- format string vulnerability
|
| gnats |
GNATS local privilege elevation
|
| gnomevfs |
gnomevfs -- unsafe URI handling
|
| gnomevfs2 |
gnomevfs -- unsafe URI handling
|
| gnu-radius |
gnu-radius -- SNMP-related denial-of-service
|
| gnupg |
gnupg -- remotely controllable function pointer
|
| gnupg |
gnupg -- buffer overflow
|
| gnupg |
gnupg -- 2 more possible memory allocation attacks
|
| gnupg |
gnupg -- user id integer overflow vulnerability
|
| gnupg |
GnuPG does not detect injection of unsigned data
|
| gnupg |
gnupg -- false positive signature verification
|
| gnupg |
gnupg -- OpenPGP symmetric encryption vulnerability
|
| gnupg |
ElGamal sign+encrypt keys created by GnuPG can be compromised
|
| gnutls |
gnutls -- RSA Signature Forgery Vulnerability
|
| gnutls |
gnutls -- certificate chain verification DoS
|
| gnutls |
GnuTLS certificate chain verification DoS
|
| gnutls-devel |
gnutls -- RSA Signature Forgery Vulnerability
|
| gnutls-devel |
gnutls -- certificate chain verification DoS
|
| gnutls-devel |
GnuTLS certificate chain verification DoS
|
| golddig |
golddig -- local buffer overflow vulnerabilities
|
| google-earth |
google-earth -- heap overflow in the KML engine
|
| gpdf |
xpdf -- disk fill DoS vulnerability
|
| gpdf |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| gpdf |
xpdf -- buffer overflow vulnerability
|
| gpdf |
xpdf -- integer overflow vulnerabilities
|
| gr-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| gr-openoffice |
openoffice -- document disclosure
|
| greed |
greed -- insecure GRX file processing
|
| grip |
grip -- CDDB response multiple matches buffer overflow vulnerability
|
| gtar |
gtar -- GNUTYPE_NAMES directory traversal vulnerability
|
| gtar |
gtar -- invalid headers buffer overflow
|
| gtetrinet |
gtetrinet -- remote code execution
|
| gtk |
gdk-pixbuf -- image decoding vulnerabilities
|
| gzip |
gzip -- multiple vulnerabilities
|
| gzip |
gzip -- directory traversal and permission race vulnerabilities
|
| hafiye |
hafiye -- lack of terminal escape sequence filtering
|
| hanemacs |
emacs -- movemail format string vulnerability
|
| hashcash |
hashcash -- heap overflow vulnerability
|
| hashcash |
hashcash -- format string vulnerability
|
| heartbeat |
heartbeat -- insecure temporary file creation vulnerability
|
| heimdal |
heimdal -- Multiple vulnerabilities
|
| heimdal |
heimdal kadmind remote heap buffer overflow
|
| heimdal |
Incorrect cross-realm trust handling in Heimdal
|
| helvis |
helvis -- arbitrary file deletion problem
|
| helvis |
helvis -- information leak vulnerabilities
|
| hlstats |
hlstats -- multiple cross site scripting vulnerabilities
|
| horde |
horde -- Phishing and Cross-Site Scripting Vulnerabilities
|
| horde |
horde -- various problems in dereferrer
|
| horde |
horde -- multiple parameter cross site scripting vulnerabilities
|
| horde |
horde -- remote code execution vulnerability in the help viewer
|
| horde |
horde -- "url" disclosure of sensitive information vulnerability
|
| horde |
horde -- Cross site scripting vulnerabilities in several of Horde's templates
|
| horde |
horde -- Cross site scripting vulnerabilities in MIME viewers
|
| horde |
horde -- Horde Page Title Cross-Site Scripting Vulnerability
|
| horde |
horde -- XSS vulnerabilities
|
| horde |
horde -- cross-site scripting vulnerability in help window
|
| horde-devel |
horde -- cross-site scripting vulnerability in help window
|
| horde-php5 |
horde -- various problems in dereferrer
|
| horde-php5 |
horde -- multiple parameter cross site scripting vulnerabilities
|
| horde-php5 |
horde -- remote code execution vulnerability in the help viewer
|
| horde-php5 |
horde -- "url" disclosure of sensitive information vulnerability
|
| horde-php5 |
horde -- Cross site scripting vulnerabilities in several of Horde's templates
|
| horde-php5 |
horde -- Cross site scripting vulnerabilities in MIME viewers
|
| horde-php5 |
horde -- Horde Page Title Cross-Site Scripting Vulnerability
|
| horde-php5 |
horde -- XSS vulnerabilities
|
| horde{-php5} |
Horde: two XSS vulnerabilities can be exposed by making an authenticated user click on a specially crafted URL and allows to execute JavaScript code in the context of Horde.
|
| hsftp |
hsftp format string vulnerabilities
|
| htdig |
htdig -- cross site scripting vulnerability
|
| hu-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| hu-openoffice |
openoffice -- document disclosure
|
| hylafax |
hylafax -- unauthorized login vulnerability
|
| icecast |
icecast -- Cross-Site Scripting Vulnerability
|
| icecast |
icecast 1.x multiple vulnerabilities
|
| icecast2 |
icecast -- HTTP header overflow
|
| icecast2 |
Icecast remote DoS vulnerability
|
| ident2 |
ident2 double byte buffer overflow
|
| ifmail |
ifmail -- unsafe set-user-ID application
|
| ilohamail |
"Content-Type" XSS vulnerability affecting other webmail systems
|
| ImageMagick |
ImageMagick -- SGI Image File heap overflow vulnerability
|
| ImageMagick |
ImageMagick -- ReadPNMImage() heap overflow vulnerability
|
| ImageMagick |
ImageMagick -- format string vulnerability
|
| ImageMagick |
ImageMagick -- PSD handler heap overflow vulnerability
|
| ImageMagick |
ImageMagick -- EXIF parser buffer overflow
|
| ImageMagick |
ImageMagick -- BMP decoder buffer overflow
|
| ImageMagick |
ImageMagick png vulnerability fix
|
| ImageMagick-nox11 |
ImageMagick -- BMP decoder buffer overflow
|
| ImageMagick-nox11 |
ImageMagick png vulnerability fix
|
| ImageMagick{,-nox11} |
ImageMagick png and bmp vulnerabilities
|
| imap-uw |
imap-uw -- mailbox name handling remote buffer vulnerability
|
| imap-uw |
imap-uw -- authentication bypass when CRAM-MD5 is enabled
|
| imlib |
imlib -- xpm heap buffer overflows and integer overflows
|
| imlib |
imlib -- BMP decoder heap buffer overflow
|
| imlib2 |
Imlib2 -- multiple image file processing vulnerabilities
|
| imlib2 |
imlib -- xpm heap buffer overflows and integer overflows
|
| imlib2 |
imlib2 -- BMP decoder buffer overflow
|
| imp |
horde -- Phishing and Cross-Site Scripting Vulnerabilities
|
| imp |
imp3 -- XSS hole in the HTML viewer
|
| imp |
XSS hole in the HTML viewer - This vulnerability only exists when using the Internet Explorer to access IMP and only when using the inline MIME viewer for HTML messages.
|
| imp |
XSS hole in the HTML viewer - The script vulnerabilities can only be exposed with certain browsers and allow XSS attacks when viewing HTML messages with the HTML MIME viewer.
|
| imp |
imp: XSS hole exploited via the Content-type header of malicious emails
|
| imwheel |
imwheel -- insecure handling of PID file
|
| ingo |
ingo -- local arbitrary shell command execution
|
| inn |
Buffer overflow in INN control message handling
|
| inn-stable |
Buffer overflow in INN control message handling
|
| ircd-hybrid |
ircd-hybrid-7 low-bandwidth DoS
|
| ircd-hybrid-ru |
ircd-hybrid-7 low-bandwidth DoS
|
| isakmpd |
isakmpd payload handling denial-of-service vulnerabilities
|
| isakmpd |
isakmpd security association deletion vulnerability
|
| isc-dhcp |
isc-dhcpd -- format string vulnerabilities
|
| isc-dhcp3 |
isc-dhcpd -- format string vulnerabilities
|
| isc-dhcp3 |
ISC DHCPD minires library contains multiple buffer overflows
|
| isc-dhcp3 |
ISC "dhcrelay" fails to limit hop count when malicious bootp packet is received
|
| isc-dhcp3-client |
isc-dhcpd -- format string vulnerabilities
|
| isc-dhcp3-devel |
isc-dhcpd -- format string vulnerabilities
|
| isc-dhcp3-relay |
isc-dhcpd -- format string vulnerabilities
|
| isc-dhcp3-relay |
isc-dhcp3-server buffer overflow in logging mechanism
|
| isc-dhcp3-server |
isc-dhcpd -- format string vulnerabilities
|
| isc-dhcp3-server |
isc-dhcp3-server buffer overflow in logging mechanism
|
| isc-dhcp3-{relay,server} |
isc-dhcp3-server buffer overflow in logging mechanism
|
| isc-dhcpd |
isc-dhcpd -- format string vulnerabilities
|
| it-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| it-openoffice |
openoffice -- document disclosure
|
| iv |
tiff -- buffer overflow vulnerability
|
| iv |
tiff -- divide-by-zero denial-of-service
|
| iv |
tiff -- directory entry count integer overflow vulnerability
|
| iv |
tiff -- multiple integer overflows
|
| iv |
tiff -- RLE decoder heap overflows
|
| ivtools |
tiff -- buffer overflow vulnerability
|
| ivtools |
tiff -- divide-by-zero denial-of-service
|
| ivtools |
tiff -- directory entry count integer overflow vulnerability
|
| ivtools |
tiff -- multiple integer overflows
|
| ivtools |
tiff -- RLE decoder heap overflows
|
| iw-pine |
pine remotely exploitable buffer overflow in newmail.c
|
| iw-pine |
pine insecure URL handling
|
| iw-pine |
pine remote denial-of-service attack
|
| iw-pine |
pine remotely exploitable vulnerabilities
|
| ja-acroread |
acroread -- XML External Entity vulnerability
|
| ja-bugzilla |
bugzilla -- multiple vulnerabilities
|
| ja-bugzilla |
bugzilla -- multiple vulnerabilities
|
| ja-bugzilla |
bugzilla -- multiple vulnerabilities
|
| ja-bugzilla |
bugzilla -- cross-site scripting vulnerability
|
| ja-gaim |
libgadu -- multiple vulnerabilities
|
| ja-gaim |
gaim -- AIM/ICQ non-UTF-8 filename crash
|
| ja-gaim |
gaim -- AIM/ICQ away message buffer overflow
|
| ja-gaim |
gaim -- Yahoo! remote crash vulnerability
|
| ja-gaim |
gaim -- MSN Remote DoS vulnerability
|
| ja-gaim |
gaim -- MSN remote DoS vulnerability
|
| ja-gaim |
gaim -- remote crash on some protocols
|
| ja-gaim |
gaim -- AIM/ICQ remote denial of service vulnerability
|
| ja-gaim |
gaim -- remote DoS on receiving malformed HTML
|
| ja-gaim |
gaim -- jabber remote crash
|
| ja-gaim |
gaim -- remote DoS on receiving certain messages over IRC
|
| ja-gaim |
gaim -- remote DoS on receiving malformed HTML
|
| ja-gaim |
gaim -- MSN denial-of-service vulnerabilities
|
| ja-gaim |
gaim -- Content-Length header denial-of-service vulnerability
|
| ja-gaim |
gaim -- multiple buffer overflows
|
| ja-gaim |
gaim -- heap overflow exploitable by malicious GroupWise server
|
| ja-gaim |
gaim -- malicious smiley themes
|
| ja-gaim |
gaim -- buffer overflow in MSN protocol support
|
| ja-gaim |
gaim remotely exploitable vulnerabilities in MSN component
|
| ja-gaim |
Several remotely exploitable buffer overflows in gaim
|
| ja-gd |
gd -- integer overflow
|
| ja-groff |
groff -- pic2graph and eqn2graph are vulnerable to symlink attack through temporary files
|
| ja-groff |
groff -- groffer uses temporary files unsafely
|
| ja-iv |
tiff -- buffer overflow vulnerability
|
| ja-iv |
tiff -- divide-by-zero denial-of-service
|
| ja-iv |
tiff -- directory entry count integer overflow vulnerability
|
| ja-iv |
tiff -- multiple integer overflows
|
| ja-iv |
tiff -- RLE decoder heap overflows
|
| ja-kdelibs |
kdelibs -- local DCOP denial of service vulnerability
|
| ja-kdelibs |
kdelibs -- insecure temporary file creation
|
| ja-kdelibs |
kdelibs3 -- konqueror FTP command injection vulnerability
|
| ja-libimg |
tiff -- buffer overflow vulnerability
|
| ja-libimg |
tiff -- divide-by-zero denial-of-service
|
| ja-libimg |
tiff -- directory entry count integer overflow vulnerability
|
| ja-libimg |
tiff -- multiple integer overflows
|
| ja-libimg |
tiff -- RLE decoder heap overflows
|
| ja-linux-mozillafirebird-gtk1 |
firefox & mozilla -- multiple vulnerabilities
|
| ja-linux-mozillafirebird-gtk1 |
firefox & mozilla -- command line URL shell command injection
|
| ja-linux-mozillafirebird-gtk1 |
firefox & mozilla -- buffer overflow vulnerability
|
| ja-linux-mozillafirebird-gtk1 |
firefox & mozilla -- multiple vulnerabilities
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- privilege escalation via non-DOM property overrides
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- privilege escalation via DOM property overrides
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- code execution through javascript: favicons
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- heap buffer overflow in GIF image processing
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- insecure temporary directory vulnerability
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- arbitrary code execution vulnerability
|
| ja-linux-mozillafirebird-gtk1 |
web browsers -- window injection vulnerabilities
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- insecure permissions for some downloaded files
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- scripting vulnerabilities
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- users may be lured into bypassing security dialogs
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- hostname spoofing bug
|
| ja-linux-mozillafirebird-gtk1 |
mozilla -- BMP decoder vulnerabilities
|
| ja-linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| ja-linux-netscape |
firefox & mozilla -- command line URL shell command injection
|
| ja-linux-netscape |
firefox & mozilla -- buffer overflow vulnerability
|
| ja-linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| ja-linux-netscape |
mozilla -- privilege escalation via non-DOM property overrides
|
| ja-linux-netscape |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| ja-linux-netscape |
mozilla -- code execution via javascript: IconURL vulnerability
|
| ja-linux-netscape |
mozilla -- privilege escalation via DOM property overrides
|
| ja-linux-netscape |
mozilla -- code execution through javascript: favicons
|
| ja-linux-netscape |
mozilla -- javascript "lambda" replace exposes memory contents
|
| ja-linux-netscape |
mozilla -- heap buffer overflow in GIF image processing
|
| ja-linux-netscape |
mozilla -- insecure temporary directory vulnerability
|
| ja-linux-netscape |
mozilla -- arbitrary code execution vulnerability
|
| ja-linux-netscape |
web browsers -- window injection vulnerabilities
|
| ja-linux-netscape |
mozilla -- insecure permissions for some downloaded files
|
| ja-linux-netscape |
mozilla -- heap overflow in NNTP handler
|
| ja-linux-netscape |
mozilla -- scripting vulnerabilities
|
| ja-linux-netscape |
mozilla -- users may be lured into bypassing security dialogs
|
| ja-linux-netscape |
mozilla -- hostname spoofing bug
|
| ja-linux-netscape |
mozilla -- BMP decoder vulnerabilities
|
| ja-lynx |
lynx -- remote buffer overflow
|
| ja-mailman |
mailman -- Multiple Vulnerabilities
|
| ja-mailman |
mailman -- Private Archive Script Cross-Site Scripting
|
| ja-mailman |
mailman -- generated passwords are poor quality
|
| ja-mailman |
mailman -- password disclosure
|
| ja-mailman |
mailman -- directory traversal vulnerability
|
| ja-mozillafirebird-gtk2 |
firefox & mozilla -- multiple vulnerabilities
|
| ja-mozillafirebird-gtk2 |
firefox & mozilla -- command line URL shell command injection
|
| ja-mozillafirebird-gtk2 |
firefox & mozilla -- buffer overflow vulnerability
|
| ja-mozillafirebird-gtk2 |
firefox & mozilla -- multiple vulnerabilities
|
| ja-mozillafirebird-gtk2 |
mozilla -- privilege escalation via non-DOM property overrides
|
| ja-mozillafirebird-gtk2 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| ja-mozillafirebird-gtk2 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| ja-mozillafirebird-gtk2 |
mozilla -- privilege escalation via DOM property overrides
|
| ja-mozillafirebird-gtk2 |
mozilla -- code execution through javascript: favicons
|
| ja-mozillafirebird-gtk2 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| ja-mozillafirebird-gtk2 |
mozilla -- heap buffer overflow in GIF image processing
|
| ja-mozillafirebird-gtk2 |
mozilla -- insecure temporary directory vulnerability
|
| ja-mozillafirebird-gtk2 |
mozilla -- arbitrary code execution vulnerability
|
| ja-mozillafirebird-gtk2 |
web browsers -- window injection vulnerabilities
|
| ja-mozillafirebird-gtk2 |
mozilla -- insecure permissions for some downloaded files
|
| ja-mozillafirebird-gtk2 |
mozilla -- scripting vulnerabilities
|
| ja-mozillafirebird-gtk2 |
mozilla -- users may be lured into bypassing security dialogs
|
| ja-mozillafirebird-gtk2 |
mozilla -- hostname spoofing bug
|
| ja-mozillafirebird-gtk2 |
mozilla -- BMP decoder vulnerabilities
|
| ja-mutt |
mutt -- Remote Buffer Overflow Vulnerability
|
| ja-mutt |
Buffer overflow in Mutt 1.4
|
| ja-mutt-devel |
mutt -- Remote Buffer Overflow Vulnerability
|
| ja-netscape-communicator-linux |
libpng stack-based buffer overflow and other code concerns
|
| ja-netscape-navigator-linux |
libpng stack-based buffer overflow and other code concerns
|
| ja-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| ja-netscape7 |
firefox & mozilla -- command line URL shell command injection
|
| ja-netscape7 |
firefox & mozilla -- buffer overflow vulnerability
|
| ja-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| ja-netscape7 |
mozilla -- privilege escalation via non-DOM property overrides
|
| ja-netscape7 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| ja-netscape7 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| ja-netscape7 |
mozilla -- privilege escalation via DOM property overrides
|
| ja-netscape7 |
mozilla -- code execution through javascript: favicons
|
| ja-netscape7 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| ja-netscape7 |
mozilla -- heap buffer overflow in GIF image processing
|
| ja-netscape7 |
mozilla -- insecure temporary directory vulnerability
|
| ja-netscape7 |
mozilla -- arbitrary code execution vulnerability
|
| ja-netscape7 |
web browsers -- window injection vulnerabilities
|
| ja-netscape7 |
mozilla -- insecure permissions for some downloaded files
|
| ja-netscape7 |
mozilla -- heap overflow in NNTP handler
|
| ja-netscape7 |
mozilla -- scripting vulnerabilities
|
| ja-netscape7 |
mozilla -- users may be lured into bypassing security dialogs
|
| ja-netscape7 |
mozilla -- hostname spoofing bug
|
| ja-netscape7 |
mozilla -- BMP decoder vulnerabilities
|
| ja-netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| ja-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| ja-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| ja-openoffice |
openoffice -- document disclosure
|
| ja-postgresql |
postgresql -- encoding based SQL injection
|
| ja-postgresql |
postgresql -- multiple vulnerabilities
|
| ja-postgresql |
postgresql -- multiple buffer overflows in PL/PgSQL parser
|
| ja-postgresql |
postgresql -- privilege escalation vulnerability
|
| ja-ppxp |
ppxp -- local root exploit
|
| ja-samba |
samba -- memory exhaustion DoS in smbd
|
| ja-samba |
samba -- Exposure of machine account credentials in winbind log files
|
| ja-samba |
samba -- integer overflow vulnerability
|
| ja-samba |
samba -- remote file disclosure
|
| ja-samba |
Multiple Potential Buffer Overruns in Samba
|
| ja-samba |
Multiple Potential Buffer Overruns in Samba
|
| ja-squirrelmail |
squirrelmail -- random variable overwrite vulnerability
|
| ja-squirrelmail |
squirrelmail -- _$POST variable handling allows for various attacks
|
| ja-squirrelmail |
squirrelmail -- Several cross site scripting vulnerabilities
|
| ja-squirrelmail |
squirrelmail -- XSS and remote code injection vulnerabilities
|
| ja-squirrelmail |
squirrelmail -- cross site scripting vulnerability
|
| ja-squirrelmail |
SquirrelMail XSS vulnerability
|
| ja-trac |
trac -- reStructuredText breach of privacy and denial of service vulnerability
|
| ja-trac |
trac -- Wiki Macro Script Insertion Vulnerability
|
| ja-uim |
uim -- privilege escalation vulnerability
|
| ja-uim |
uim -- privilege escalation vulnerability
|
| ja-w3m |
w3m -- format string vulnerability
|
| ja-w3m-img |
w3m -- format string vulnerability
|
| ja-xv |
xv -- filename handling format string vulnerability
|
| jabber |
fd_set -- bitmap index overflow in multiple applications
|
| jabber |
jabberd -- denial-of-service vulnerability
|
| jabberd |
jabberd -- SASL Negotiation Denial of Service Vulnerability
|
| jabberd |
jabberd -- 3 buffer overflows
|
| jabberd |
jabberd -- remote buffer overflow vulnerability
|
| jakarta-tomcat |
tomcat -- Tomcat Manager cross-site scripting
|
| jdk |
jdk -- jar directory traversal vulnerability
|
| jdk |
jdk/jre -- Security Vulnerability With Java Plugin
|
| jftpgw |
Arbitrary code execution via a format string vulnerability in jftpgw
|
| jftpgw |
jftpgw remote syslog format string vulnerability
|
| joomla |
joomla -- multiple remote vulnerabilities
|
| joomla |
joomla -- multiple vulnerabilities
|
| joomla |
Joomla -- multiple vulnerabilities
|
| jp-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| junkbuster |
junkbuster -- heap corruption vulnerability and configuration modification vulnerability
|
| junkbuster-zlib |
junkbuster -- heap corruption vulnerability and configuration modification vulnerability
|
| kaffeine |
kaffeine -- buffer overflow vulnerability
|
| kdebase |
kdebase -- Kate backup file permission leak
|
| kdebase |
web browsers -- window injection vulnerabilities
|
| kdebase |
konqueror -- Password Disclosure for SMB Shares
|
| kdebase |
Mutiple browser frame injection vulnerability
|
| kdebase |
Konqueror frame injection vulnerability
|
| kdeedu |
kstars -- exploitable set-user-ID application fliccd
|
| kdegraphics |
kpdf -- heap based buffer overflow
|
| kdegraphics |
xpdf -- disk fill DoS vulnerability
|
| kdegraphics |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| kdegraphics |
xpdf -- buffer overflow vulnerability
|
| kdegraphics |
xpdf -- integer overflow vulnerabilities
|
| kdegraphics |
Multiple integer overflow and integer arithmetic flaws in imported xpdf code
|
| kdelibs |
kdelibs -- integer overflow in khtml
|
| kdelibs |
kdelibs -- kimgio input validation errors
|
| kdelibs |
kdelibs -- local DCOP denial of service vulnerability
|
| kdelibs |
kdelibs -- insecure temporary file creation
|
| kdelibs |
web browsers -- window injection vulnerabilities
|
| kdelibs |
kdelibs3 -- konqueror FTP command injection vulnerability
|
| kdelibs |
konqueror -- Password Disclosure for SMB Shares
|
| kdelibs |
kdelibs -- konqueror cross-domain cookie injection
|
| kdelibs |
Mutiple browser frame injection vulnerability
|
| kdelibs |
kdelibs insecure temporary file handling
|
| kdelibs |
KDElibs temporary directory vulnerability
|
| kdelibs |
DCOPServer Temporary Filename Vulnerability
|
| kdelibs |
Konqueror frame injection vulnerability
|
| kdelibs |
URI handler vulnerabilities in several browsers
|
| kdelibs-nocups |
kdelibs -- integer overflow in khtml
|
| kdelibs-nocups |
kdelibs -- local DCOP denial of service vulnerability
|
| kdenetwork |
libgadu -- multiple vulnerabilities
|
| kdepim |
kdepim exploitable buffer overflow in VCF reader
|
| kdewebdev |
kdewebdev -- kommander untrusted code execution vulnerability
|
| ko-gaim |
libgadu -- multiple vulnerabilities
|
| ko-gaim |
gaim -- AIM/ICQ non-UTF-8 filename crash
|
| ko-gaim |
gaim -- AIM/ICQ away message buffer overflow
|
| ko-gaim |
gaim -- Yahoo! remote crash vulnerability
|
| ko-gaim |
gaim -- MSN Remote DoS vulnerability
|
| ko-gaim |
gaim -- MSN remote DoS vulnerability
|
| ko-gaim |
gaim -- remote crash on some protocols
|
| ko-gaim |
gaim -- AIM/ICQ remote denial of service vulnerability
|
| ko-gaim |
gaim -- remote DoS on receiving malformed HTML
|
| ko-gaim |
gaim -- jabber remote crash
|
| ko-gaim |
gaim -- remote DoS on receiving certain messages over IRC
|
| ko-gaim |
gaim -- remote DoS on receiving malformed HTML
|
| ko-gaim |
gaim -- MSN denial-of-service vulnerabilities
|
| ko-gaim |
gaim -- Content-Length header denial-of-service vulnerability
|
| ko-gaim |
gaim -- multiple buffer overflows
|
| ko-gaim |
gaim -- heap overflow exploitable by malicious GroupWise server
|
| ko-gaim |
gaim -- malicious smiley themes
|
| ko-gaim |
gaim remotely exploitable vulnerabilities in MSN component
|
| ko-gaim |
Several remotely exploitable buffer overflows in gaim
|
| ko-helvis |
helvis -- arbitrary file deletion problem
|
| ko-helvis |
helvis -- information leak vulnerabilities
|
| ko-netscape-communicator-linux |
libpng stack-based buffer overflow and other code concerns
|
| ko-netscape-navigator-linux |
libpng stack-based buffer overflow and other code concerns
|
| ko-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| ko-openoffice |
openoffice -- document disclosure
|
| ko-unzip |
unzip -- permission race vulnerability
|
| koffice |
abiword, koffice -- stack based buffer overflow vulnerabilities
|
| koffice |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| koffice |
xpdf -- buffer overflow vulnerability
|
| koffice |
xpdf -- integer overflow vulnerabilities
|
| koffice |
Multiple integer overflow and integer arithmetic flaws in imported xpdf code
|
| konversation |
konversation -- shell script command injection
|
| kpopup |
kpopup -- local root exploit and local denial of service
|
| kr-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| krb5 |
krb5 -- heap buffer overflow vulnerability in libkadm5srv
|
| krb5 |
krb5 -- double-free vulnerabilities
|
| krb5 |
krb5 -- ASN.1 decoder denial-of-service vulnerability
|
| krb5 |
MIT Kerberos 5 krb5_aname_to_localname() buffer overflow
|
| krb5-beta |
krb5 -- heap buffer overflow vulnerability in libkadm5srv
|
| kronolith |
kronolith -- arbitrary local file inclusion vulnerability
|
| kronolith |
kronolith -- Cross site scripting vulnerabilities in several of the calendar name and event data fields
|
| l2tpd |
l2tpd BSS-based buffer overflow
|
| lbreakout2 |
lbreakout2 vulnerability in environment variable handling
|
| lcdproc |
LCDProc buffer overflow/format string vulnerabilities
|
| leafnode |
leafnode -- denial of service vulnerability
|
| leafnode |
leafnode -- fetchnews denial-of-service triggered by transmission abort/timeout
|
| leafnode |
leafnode denial-of-service triggered by article request
|
| leafnode |
leafnode fetchnews denial-of-service triggered by missing header
|
| leafnode |
leafnode fetchnews denial-of-service triggered by truncated transmission
|
| lesstif |
xpm -- image decoding vulnerabilities
|
| lftp |
lftp HTML parsing vulnerability
|
| lha |
lha -- numerous vulnerabilities when extracting archives
|
| lha |
multiple vulnerabilities in LHA
|
| lha |
lha buffer overflows and path traversal issues
|
| libexif |
libexif -- buffer overflow vulnerability
|
| libmcrypt |
Buffer overflows in libmcrypt
|
| libmms |
libmms -- stack-based buffer overflow
|
| libmusicbrainz |
libmusicbrainz -- multiple buffer overflow vulnerabilities
|
| libtomcrypt |
libtomcrypt -- weak signature scheme with ECC keys
|
| libtool |
GNU libtool insecure temporary file handling
|
| libxine |
libxine -- multiple buffer overflow vulnerabilities
|
| libxine |
libmms -- stack-based buffer overflow
|
| libxine |
libxine -- buffer overflow vulnerability
|
| libxine |
libxine -- format string vulnerability
|
| libxine |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| libxine |
libxine -- DVD subpicture decoder heap overflow
|
| libxine |
libxine -- multiple vulnerabilities in VideoCD handling
|
| libxine |
libxine -- multiple buffer overflows in RTSP
|
| libxine |
libxine -- buffer-overflow vulnerability in aiff support
|
| libxine |
mplayer -- multiple vulnerabilities
|
| libxine |
xine-lib arbitrary file overwrite
|
| libxine |
xine-lib RTSP handling vulnerabilities
|
| libxml |
libxml -- remote buffer overflows
|
| libxml2 |
libxml -- remote buffer overflows
|
| libxml2 |
libxml2 stack buffer overflow in URI parsing
|
| libXpm |
xpm -- image decoding vulnerabilities
|
| lifetype |
lifetype -- ADOdb "server.php" Insecure Test Script Security Issue
|
| lighttpd |
lighttpd -- script source disclosure vulnerability
|
| linux-aspell |
Buffer overflow in word-list-compress
|
| linux-blackdown-jdk |
jdk -- jar directory traversal vulnerability
|
| linux-blackdown-jdk |
jdk/jre -- Security Vulnerability With Java Plugin
|
| linux-curl |
curl -- TFTP packet buffer overflow vulnerability
|
| linux-firefox |
mozilla -- multiple vulnerabilities
|
| linux-firefox |
mozilla -- multiple vulnerabilities
|
| linux-firefox |
firefox -- denial of service vulnerability
|
| linux-firefox |
mozilla -- multiple vulnerabilities
|
| linux-firefox |
firefox & mozilla -- multiple vulnerabilities
|
| linux-firefox |
firefox & mozilla -- command line URL shell command injection
|
| linux-firefox |
firefox & mozilla -- buffer overflow vulnerability
|
| linux-firefox |
firefox & mozilla -- multiple vulnerabilities
|
| linux-firefox |
mozilla -- privilege escalation via non-DOM property overrides
|
| linux-firefox |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| linux-firefox |
mozilla -- code execution via javascript: IconURL vulnerability
|
| linux-firefox |
firefox -- PLUGINSPAGE privileged javascript execution
|
| linux-firefox |
mozilla -- privilege escalation via DOM property overrides
|
| linux-firefox |
mozilla -- code execution through javascript: favicons
|
| linux-firefox |
mozilla -- javascript "lambda" replace exposes memory contents
|
| linux-firefox |
firefox -- arbitrary code execution in sidebar panel
|
| linux-firefox |
firefox -- arbitrary code execution from sidebar panel
|
| linux-firefox |
mozilla -- heap buffer overflow in GIF image processing
|
| linux-firefox-devel |
mozilla -- multiple vulnerabilities
|
| linux-firefox-devel |
mozilla -- multiple vulnerabilities
|
| linux-flashplugin |
linux-flashplugin7 -- arbitrary code execution vulnerabilities
|
| linux-flashplugin |
linux-flashplugin -- arbitrary code execution vulnerability
|
| linux-flashplugin6 |
Macromedia flash player -- swf file handling arbitrary code
|
| linux-flashplugin7 |
Macromedia flash player -- swf file handling arbitrary code
|
| linux-gdk-pixbuf |
gdk-pixbuf -- image decoding vulnerabilities
|
| linux-ibm-jdk |
jdk -- jar directory traversal vulnerability
|
| linux-ibm-jdk |
jdk/jre -- Security Vulnerability With Java Plugin
|
| linux-jdk |
jdk -- jar directory traversal vulnerability
|
| linux-jdk |
jdk/jre -- Security Vulnerability With Java Plugin
|
| linux-mozilla |
mozilla -- multiple vulnerabilities
|
| linux-mozilla |
mozilla -- multiple vulnerabilities
|
| linux-mozilla |
mozilla -- multiple vulnerabilities
|
| linux-mozilla |
firefox & mozilla -- multiple vulnerabilities
|
| linux-mozilla |
firefox & mozilla -- command line URL shell command injection
|
| linux-mozilla |
firefox & mozilla -- buffer overflow vulnerability
|
| linux-mozilla |
firefox & mozilla -- multiple vulnerabilities
|
| linux-mozilla |
mozilla -- privilege escalation via non-DOM property overrides
|
| linux-mozilla |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| linux-mozilla |
mozilla -- code execution via javascript: IconURL vulnerability
|
| linux-mozilla |
mozilla -- privilege escalation via DOM property overrides
|
| linux-mozilla |
mozilla -- code execution through javascript: favicons
|
| linux-mozilla |
mozilla -- javascript "lambda" replace exposes memory contents
|
| linux-mozilla |
mozilla -- heap buffer overflow in GIF image processing
|
| linux-mozilla |
mozilla -- insecure temporary directory vulnerability
|
| linux-mozilla |
mozilla -- arbitrary code execution vulnerability
|
| linux-mozilla |
web browsers -- window injection vulnerabilities
|
| linux-mozilla |
mozilla -- insecure permissions for some downloaded files
|
| linux-mozilla |
mozilla -- heap overflow in NNTP handler
|
| linux-mozilla |
mozilla -- scripting vulnerabilities
|
| linux-mozilla |
mozilla -- users may be lured into bypassing security dialogs
|
| linux-mozilla |
mozilla -- hostname spoofing bug
|
| linux-mozilla |
mozilla -- BMP decoder vulnerabilities
|
| linux-mozilla |
mozilla -- vCard stack buffer overflow
|
| linux-mozilla |
mozilla -- multiple heap buffer overflows
|
| linux-mozilla |
mozilla -- security icon spoofing
|
| linux-mozilla |
mozilla -- NULL bytes in FTP URLs
|
| linux-mozilla |
mozilla -- built-in CA certificates may be overridden
|
| linux-mozilla |
mozilla -- POP client heap overflow
|
| linux-mozilla |
mozilla -- SOAPParameter integer overflow
|
| linux-mozilla |
Mutiple browser frame injection vulnerability
|
| linux-mozilla |
libpng stack-based buffer overflow and other code concerns
|
| linux-mozilla |
libpng stack-based buffer overflow and other code concerns
|
| linux-mozilla |
Mozilla / Firefox user interface spoofing vulnerability
|
| linux-mozilla |
Mozilla certificate spoofing
|
| linux-mozilla |
Mozilla / Firefox user interface spoofing vulnerability
|
| linux-mozilla |
Mozilla certificate spoofing
|
| linux-mozilla-devel |
mozilla -- multiple vulnerabilities
|
| linux-mozilla-devel |
mozilla -- multiple vulnerabilities
|
| linux-mozilla-devel |
mozilla -- multiple vulnerabilities
|
| linux-mozilla-devel |
firefox & mozilla -- multiple vulnerabilities
|
| linux-mozilla-devel |
firefox & mozilla -- command line URL shell command injection
|
| linux-mozilla-devel |
firefox & mozilla -- buffer overflow vulnerability
|
| linux-mozilla-devel |
firefox & mozilla -- multiple vulnerabilities
|
| linux-mozilla-devel |
mozilla -- privilege escalation via non-DOM property overrides
|
| linux-mozilla-devel |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| linux-mozilla-devel |
mozilla -- code execution via javascript: IconURL vulnerability
|
| linux-mozilla-devel |
mozilla -- privilege escalation via DOM property overrides
|
| linux-mozilla-devel |
mozilla -- code execution through javascript: favicons
|
| linux-mozilla-devel |
mozilla -- javascript "lambda" replace exposes memory contents
|
| linux-mozilla-devel |
mozilla -- heap buffer overflow in GIF image processing
|
| linux-mozilla-devel |
mozilla -- insecure temporary directory vulnerability
|
| linux-mozilla-devel |
mozilla -- arbitrary code execution vulnerability
|
| linux-mozilla-devel |
web browsers -- window injection vulnerabilities
|
| linux-mozilla-devel |
mozilla -- insecure permissions for some downloaded files
|
| linux-mozilla-devel |
mozilla -- heap overflow in NNTP handler
|
| linux-mozilla-devel |
mozilla -- scripting vulnerabilities
|
| linux-mozilla-devel |
mozilla -- users may be lured into bypassing security dialogs
|
| linux-mozilla-devel |
mozilla -- hostname spoofing bug
|
| linux-mozilla-devel |
mozilla -- BMP decoder vulnerabilities
|
| linux-mozilla-devel |
mozilla -- security icon spoofing
|
| linux-mozilla-devel |
mozilla -- NULL bytes in FTP URLs
|
| linux-mozilla-devel |
mozilla -- built-in CA certificates may be overridden
|
| linux-mozilla-devel |
mozilla -- SOAPParameter integer overflow
|
| linux-mozilla-devel |
Mutiple browser frame injection vulnerability
|
| linux-mozilla-devel |
libpng stack-based buffer overflow and other code concerns
|
| linux-mozilla-devel |
libpng stack-based buffer overflow and other code concerns
|
| linux-mozilla-devel |
Mozilla / Firefox user interface spoofing vulnerability
|
| linux-mozilla-devel |
Mozilla certificate spoofing
|
| linux-mozilla-devel |
Mozilla / Firefox user interface spoofing vulnerability
|
| linux-mozilla-devel |
Mozilla certificate spoofing
|
| linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| linux-mozillafirebird |
firefox & mozilla -- command line URL shell command injection
|
| linux-mozillafirebird |
firefox & mozilla -- buffer overflow vulnerability
|
| linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| linux-mozillafirebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| linux-mozillafirebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| linux-mozillafirebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| linux-mozillafirebird |
mozilla -- privilege escalation via DOM property overrides
|
| linux-mozillafirebird |
mozilla -- code execution through javascript: favicons
|
| linux-mozillafirebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| linux-mozillafirebird |
mozilla -- heap buffer overflow in GIF image processing
|
| linux-mozillafirebird |
mozilla -- insecure temporary directory vulnerability
|
| linux-mozillafirebird |
mozilla -- arbitrary code execution vulnerability
|
| linux-mozillafirebird |
web browsers -- window injection vulnerabilities
|
| linux-mozillafirebird |
mozilla -- insecure permissions for some downloaded files
|
| linux-mozillafirebird |
mozilla -- scripting vulnerabilities
|
| linux-mozillafirebird |
mozilla -- users may be lured into bypassing security dialogs
|
| linux-mozillafirebird |
mozilla -- hostname spoofing bug
|
| linux-mozillafirebird |
mozilla -- BMP decoder vulnerabilities
|
| linux-mozillafirebird |
mozilla -- multiple heap buffer overflows
|
| linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| linux-netscape |
firefox & mozilla -- command line URL shell command injection
|
| linux-netscape |
firefox & mozilla -- buffer overflow vulnerability
|
| linux-netscape |
firefox & mozilla -- multiple vulnerabilities
|
| linux-netscape |
mozilla -- privilege escalation via non-DOM property overrides
|
| linux-netscape |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| linux-netscape |
mozilla -- code execution via javascript: IconURL vulnerability
|
| linux-netscape |
mozilla -- privilege escalation via DOM property overrides
|
| linux-netscape |
mozilla -- code execution through javascript: favicons
|
| linux-netscape |
mozilla -- javascript "lambda" replace exposes memory contents
|
| linux-netscape |
mozilla -- heap buffer overflow in GIF image processing
|
| linux-netscape |
mozilla -- insecure temporary directory vulnerability
|
| linux-netscape |
mozilla -- arbitrary code execution vulnerability
|
| linux-netscape |
web browsers -- window injection vulnerabilities
|
| linux-netscape |
mozilla -- insecure permissions for some downloaded files
|
| linux-netscape |
mozilla -- heap overflow in NNTP handler
|
| linux-netscape |
mozilla -- scripting vulnerabilities
|
| linux-netscape |
mozilla -- users may be lured into bypassing security dialogs
|
| linux-netscape |
mozilla -- hostname spoofing bug
|
| linux-netscape |
mozilla -- BMP decoder vulnerabilities
|
| linux-netscape-communicator |
libpng stack-based buffer overflow and other code concerns
|
| linux-netscape-navigator |
libpng stack-based buffer overflow and other code concerns
|
| linux-netscape-{communicator,navigator} |
libpng stack-based buffer overflow and other code concerns
|
| linux-openmotif |
xpm -- image decoding vulnerabilities
|
| linux-opera |
opera -- multiple vulnerabilities
|
| linux-opera |
opera -- URL parsing heap overflow vulnerability
|
| linux-opera |
opera -- RSA Signature Forgery
|
| linux-opera |
opera -- multiple vulnerabilities
|
| linux-opera |
opera -- command line URL shell command injection
|
| linux-opera |
opera -- image dragging vulnerability
|
| linux-opera |
opera -- download dialog spoofing vulnerability
|
| linux-opera |
opera -- XMLHttpRequest security bypass
|
| linux-opera |
opera -- "javascript:" URL cross-site scripting vulnerability
|
| linux-opera |
opera -- redirection cross-site scripting vulnerability
|
| linux-opera |
opera -- "data:" URI handler spoofing vulnerability
|
| linux-opera |
opera -- kfmclient exec command execution vulnerability
|
| linux-opera |
web browsers -- window injection vulnerabilities
|
| linux-opera |
opera -- multiple vulnerabilities in Java implementation
|
| linux-opera |
Mutiple browser frame injection vulnerability
|
| linux-opera |
URI handler vulnerabilities in several browsers
|
| linux-phoenix |
firefox & mozilla -- multiple vulnerabilities
|
| linux-phoenix |
firefox & mozilla -- command line URL shell command injection
|
| linux-phoenix |
firefox & mozilla -- buffer overflow vulnerability
|
| linux-phoenix |
firefox & mozilla -- multiple vulnerabilities
|
| linux-phoenix |
mozilla -- privilege escalation via non-DOM property overrides
|
| linux-phoenix |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| linux-phoenix |
mozilla -- code execution via javascript: IconURL vulnerability
|
| linux-phoenix |
mozilla -- privilege escalation via DOM property overrides
|
| linux-phoenix |
mozilla -- code execution through javascript: favicons
|
| linux-phoenix |
mozilla -- javascript "lambda" replace exposes memory contents
|
| linux-phoenix |
mozilla -- heap buffer overflow in GIF image processing
|
| linux-phoenix |
mozilla -- insecure temporary directory vulnerability
|
| linux-phoenix |
mozilla -- arbitrary code execution vulnerability
|
| linux-phoenix |
web browsers -- window injection vulnerabilities
|
| linux-phoenix |
mozilla -- insecure permissions for some downloaded files
|
| linux-phoenix |
mozilla -- scripting vulnerabilities
|
| linux-phoenix |
mozilla -- users may be lured into bypassing security dialogs
|
| linux-phoenix |
mozilla -- hostname spoofing bug
|
| linux-phoenix |
mozilla -- BMP decoder vulnerabilities
|
| linux-png |
libpng stack-based buffer overflow and other code concerns
|
| linux-png |
libpng stack-based buffer overflow and other code concerns
|
| linux-png |
libpng denial-of-service
|
| linux-png |
libpng denial-of-service
|
| linux-png |
libpng row buffer overflow
|
| linux-realplayer |
linux-realplayer -- buffer overrun
|
| linux-realplayer |
linux-realplayer -- heap overflow
|
| linux-realplayer |
linux-realplayer -- RealText parsing heap overflow
|
| linux-realplayer |
realplayer -- remote heap overflow
|
| linux-realplayer |
realplayer -- arbitrary file deletion and other vulnerabilities
|
| linux-seamonkey |
mozilla -- multiple vulnerabilities
|
| linux-seamonkey |
mozilla -- multiple vulnerabilities
|
| linux-seamonkey |
mozilla -- multiple vulnerabilities
|
| linux-seamonkey-devel |
mozilla -- multiple vulnerabilities
|
| linux-shoutcast |
shoutcast -- cross-site scripting, information exposure
|
| linux-sun-jdk |
jdk -- jar directory traversal vulnerability
|
| linux-sun-jdk |
jdk/jre -- Security Vulnerability With Java Plugin
|
| linux-thunderbird |
mozilla -- multiple vulnerabilities
|
| linux-thunderbird |
mozilla -- multiple vulnerabilities
|
| linux-tiff |
tiff -- buffer overflow vulnerability
|
| linux-tiff |
tiff -- divide-by-zero denial-of-service
|
| linux-tiff |
tiff -- tiffdump integer overflow vulnerability
|
| linux-tiff |
tiff -- directory entry count integer overflow vulnerability
|
| linux-tiff |
tiff -- multiple integer overflows
|
| linux-tiff |
tiff -- RLE decoder heap overflows
|
| linux-unace |
unace -- multiple vulnerabilities
|
| linux_base |
linux_base -- vulnerabilities in Red Hat 7.1 libraries
|
| linux_base |
xpm -- image decoding vulnerabilities
|
| linux_base-suse |
zlib -- buffer overflow vulnerability
|
| linux_base-suse |
kdebase -- Kate backup file permission leak
|
| lukemftpd |
tnftpd -- remotely exploitable vulnerability
|
| lynx |
lynx -- remote buffer overflow
|
| lynx-ssl |
lynx -- remote buffer overflow
|
| mail-notification |
mail-notification -- denial-of-service vulnerability
|
| mailman |
mailman -- Multiple Vulnerabilities
|
| mailman |
mailman -- Private Archive Script Cross-Site Scripting
|
| mailman |
mailman -- generated passwords are poor quality
|
| mailman |
mailman -- password disclosure
|
| mailman |
mailman -- directory traversal vulnerability
|
| mailman |
mailman denial-of-service vulnerability in MailCommandHandler
|
| mailman |
mailman XSS in admin script
|
| mailman |
mailman XSS in create script
|
| mailman |
mailman XSS in user options page
|
| mailman |
mailman allows 3rd parties to retrieve member passwords
|
| mailman-with-htdig |
mailman -- Multiple Vulnerabilities
|
| mailman-with-htdig |
mailman -- Private Archive Script Cross-Site Scripting
|
| mambo |
mambo -- multiple SQL injection vulnerabilities
|
| mambo |
mambo -- SQL injection vulnerabilities
|
| mambo |
mambo -- "register_globals" emulation layer overwrite vulnerability
|
| mambo |
mambo -- multiple vulnerabilities
|
| mantis |
mantis -- "view_filters_page.php" cross site scripting vulnerability
|
| mantis |
mantis -- "t_core_path" file inclusion vulnerability
|
| mantis |
mantis -- "view_filters_page.php" cross-site scripting vulnerability
|
| mathopd |
Mathopd buffer overflow
|
| mc |
mc -- multiple vulnerabilities
|
| mc |
gnomevfs -- unsafe URI handling
|
| mc |
Midnight Commander buffer overflows, format string bugs, and insecure temporary file handling
|
| mc |
Midnight Commander buffer overflow during symlink resolution
|
| mediawiki |
mediawiki -- hardcoded placeholder string security bypass vulnerability
|
| mediawiki |
mediawiki -- cross site scripting vulnerability
|
| metamail |
metamail format string bugs and buffer overflows
|
| milter-bogom |
milter-bogom -- headerless message crash
|
| mkbold-mkitalic |
mkbold-mkitalic -- format string vulnerability
|
| mnemo |
mnemo -- Cross site scripting vulnerabilities in several of the notepad name and note data fields
|
| mnogosearch |
mnGoSearch buffer overflow in UdmDocToTextBuf()
|
| mod_access_referer |
mod_access_referer -- null pointer dereference vulnerability
|
| mod_dav |
mod_dav -- lock related denial-of-service
|
| mod_dosevasive20 |
mod_dosevasive -- insecure temporary file creation
|
| mod_frontpage13 |
frontpage -- cross site scripting vulnerability
|
| mod_frontpage20 |
frontpage -- cross site scripting vulnerability
|
| mod_frontpage21 |
frontpage -- cross site scripting vulnerability
|
| mod_frontpage22 |
frontpage -- cross site scripting vulnerability
|
| mod_php |
PHP -- multiple vulnerabilities
|
| mod_php |
php -- readfile() DoS vulnerability
|
| mod_php |
php -- multiple vulnerabilities
|
| mod_php |
php -- php_variables memory disclosure
|
| mod_php4 |
php -- open_basedir Race Condition Vulnerability
|
| mod_php4 |
php -- multiple vulnerabilities
|
| mod_php4 |
PHP -- multiple vulnerabilities
|
| mod_php4 |
php -- readfile() DoS vulnerability
|
| mod_php4 |
php -- multiple vulnerabilities
|
| mod_php4 |
php -- php_variables memory disclosure
|
| mod_php4 |
php -- strip_tags cross-site scripting vulnerability
|
| mod_php4 |
php -- memory_limit related vulnerability
|
| mod_php4 |
php -- vulnerability in RFC 1867 file upload processing
|
| mod_php4 |
PHP memory_limit and strip_tags() vulnerabilities
|
| mod_php4-twig |
PHP -- multiple vulnerabilities
|
| mod_php4-twig |
php -- readfile() DoS vulnerability
|
| mod_php4-twig |
php -- multiple vulnerabilities
|
| mod_php4-twig |
php -- php_variables memory disclosure
|
| mod_php4-twig |
php -- strip_tags cross-site scripting vulnerability
|
| mod_php4-twig |
php -- memory_limit related vulnerability
|
| mod_php4-twig |
PHP memory_limit and strip_tags() vulnerabilities
|
| mod_php5 |
php -- _ecalloc Integer Overflow Vulnerability
|
| mod_php5 |
php -- open_basedir Race Condition Vulnerability
|
| mod_php5 |
php -- multiple vulnerabilities
|
| mod_php5 |
php -- multiple vulnerabilities
|
| mod_php5 |
php -- php_variables memory disclosure
|
| mod_php5 |
php -- strip_tags cross-site scripting vulnerability
|
| mod_php5 |
php -- memory_limit related vulnerability
|
| mod_php5 |
php -- vulnerability in RFC 1867 file upload processing
|
| mod_php5 |
PHP memory_limit and strip_tags() vulnerabilities
|
| mod_pubcookie |
mod_pubcookie -- cross site scripting vulnerability
|
| mod_python |
mod_python -- information leakage vulnerability
|
| mod_python |
mod_python denial-of-service vulnerability in parse_qs
|
| mod_security |
ModSecurity for Apache 2.x remote off-by-one overflow
|
| moinmoin |
moinmoin -- ACL group bypass
|
| moinmoin |
MoinMoin administrative group name privilege escalation vulnerability
|
| mono |
mono -- "System.CodeDom.Compiler" Insecure Temporary Creation
|
| mozilla |
mozilla -- multiple vulnerabilities
|
| mozilla |
mozilla -- multiple vulnerabilities
|
| mozilla |
mozilla -- multiple vulnerabilities
|
| mozilla |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla |
firefox & mozilla -- command line URL shell command injection
|
| mozilla |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla |
mozilla -- code execution through javascript: favicons
|
| mozilla |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla |
mozilla -- insecure temporary directory vulnerability
|
| mozilla |
mozilla -- arbitrary code execution vulnerability
|
| mozilla |
web browsers -- window injection vulnerabilities
|
| mozilla |
mozilla -- insecure permissions for some downloaded files
|
| mozilla |
mozilla -- heap overflow in NNTP handler
|
| mozilla |
mozilla -- scripting vulnerabilities
|
| mozilla |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla |
mozilla -- hostname spoofing bug
|
| mozilla |
mozilla -- BMP decoder vulnerabilities
|
| mozilla |
mozilla -- vCard stack buffer overflow
|
| mozilla |
mozilla -- multiple heap buffer overflows
|
| mozilla |
mozilla -- security icon spoofing
|
| mozilla |
mozilla -- NULL bytes in FTP URLs
|
| mozilla |
mozilla -- automated file upload
|
| mozilla |
mozilla -- built-in CA certificates may be overridden
|
| mozilla |
mozilla -- POP client heap overflow
|
| mozilla |
mozilla -- SOAPParameter integer overflow
|
| mozilla |
Mutiple browser frame injection vulnerability
|
| mozilla |
libpng stack-based buffer overflow and other code concerns
|
| mozilla |
libpng stack-based buffer overflow and other code concerns
|
| mozilla |
Mozilla / Firefox user interface spoofing vulnerability
|
| mozilla |
Mozilla certificate spoofing
|
| mozilla |
Mozilla / Firefox user interface spoofing vulnerability
|
| mozilla |
Mozilla certificate spoofing
|
| mozilla+ipv6 |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla+ipv6 |
firefox & mozilla -- command line URL shell command injection
|
| mozilla+ipv6 |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla+ipv6 |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla+ipv6 |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla+ipv6 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla+ipv6 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla+ipv6 |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla+ipv6 |
mozilla -- code execution through javascript: favicons
|
| mozilla+ipv6 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla+ipv6 |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla+ipv6 |
mozilla -- insecure temporary directory vulnerability
|
| mozilla+ipv6 |
mozilla -- arbitrary code execution vulnerability
|
| mozilla+ipv6 |
web browsers -- window injection vulnerabilities
|
| mozilla+ipv6 |
mozilla -- insecure permissions for some downloaded files
|
| mozilla+ipv6 |
mozilla -- heap overflow in NNTP handler
|
| mozilla+ipv6 |
mozilla -- scripting vulnerabilities
|
| mozilla+ipv6 |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla+ipv6 |
mozilla -- hostname spoofing bug
|
| mozilla+ipv6 |
mozilla -- BMP decoder vulnerabilities
|
| mozilla-embedded |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-embedded |
firefox & mozilla -- command line URL shell command injection
|
| mozilla-embedded |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla-embedded |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-embedded |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla-embedded |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla-embedded |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla-embedded |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla-embedded |
mozilla -- code execution through javascript: favicons
|
| mozilla-embedded |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla-embedded |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla-embedded |
mozilla -- insecure temporary directory vulnerability
|
| mozilla-embedded |
mozilla -- arbitrary code execution vulnerability
|
| mozilla-embedded |
web browsers -- window injection vulnerabilities
|
| mozilla-embedded |
mozilla -- insecure permissions for some downloaded files
|
| mozilla-embedded |
mozilla -- heap overflow in NNTP handler
|
| mozilla-embedded |
mozilla -- scripting vulnerabilities
|
| mozilla-embedded |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla-embedded |
mozilla -- hostname spoofing bug
|
| mozilla-embedded |
mozilla -- BMP decoder vulnerabilities
|
| mozilla-firebird |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-firebird |
firefox & mozilla -- command line URL shell command injection
|
| mozilla-firebird |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla-firebird |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-firebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla-firebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla-firebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla-firebird |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla-firebird |
mozilla -- code execution through javascript: favicons
|
| mozilla-firebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla-firebird |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla-firebird |
mozilla -- insecure temporary directory vulnerability
|
| mozilla-firebird |
mozilla -- arbitrary code execution vulnerability
|
| mozilla-firebird |
web browsers -- window injection vulnerabilities
|
| mozilla-firebird |
mozilla -- insecure permissions for some downloaded files
|
| mozilla-firebird |
mozilla -- scripting vulnerabilities
|
| mozilla-firebird |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla-firebird |
mozilla -- hostname spoofing bug
|
| mozilla-firebird |
mozilla -- BMP decoder vulnerabilities
|
| mozilla-gtk |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-gtk |
firefox & mozilla -- command line URL shell command injection
|
| mozilla-gtk |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla-gtk |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-gtk |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla-gtk |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla-gtk |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla-gtk |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla-gtk |
mozilla -- code execution through javascript: favicons
|
| mozilla-gtk |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla-gtk |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla-gtk |
mozilla -- insecure temporary directory vulnerability
|
| mozilla-gtk |
mozilla -- arbitrary code execution vulnerability
|
| mozilla-gtk |
web browsers -- window injection vulnerabilities
|
| mozilla-gtk |
mozilla -- insecure permissions for some downloaded files
|
| mozilla-gtk |
mozilla -- heap overflow in NNTP handler
|
| mozilla-gtk |
mozilla -- scripting vulnerabilities
|
| mozilla-gtk |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla-gtk |
mozilla -- hostname spoofing bug
|
| mozilla-gtk |
mozilla -- BMP decoder vulnerabilities
|
| mozilla-gtk1 |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-gtk1 |
firefox & mozilla -- command line URL shell command injection
|
| mozilla-gtk1 |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla-gtk1 |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-gtk1 |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla-gtk1 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla-gtk1 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla-gtk1 |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla-gtk1 |
mozilla -- code execution through javascript: favicons
|
| mozilla-gtk1 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla-gtk1 |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla-gtk1 |
mozilla -- insecure temporary directory vulnerability
|
| mozilla-gtk1 |
mozilla -- arbitrary code execution vulnerability
|
| mozilla-gtk1 |
web browsers -- window injection vulnerabilities
|
| mozilla-gtk1 |
mozilla -- insecure permissions for some downloaded files
|
| mozilla-gtk1 |
mozilla -- heap overflow in NNTP handler
|
| mozilla-gtk1 |
mozilla -- scripting vulnerabilities
|
| mozilla-gtk1 |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla-gtk1 |
mozilla -- hostname spoofing bug
|
| mozilla-gtk1 |
mozilla -- BMP decoder vulnerabilities
|
| mozilla-gtk1 |
mozilla -- vCard stack buffer overflow
|
| mozilla-gtk1 |
mozilla -- multiple heap buffer overflows
|
| mozilla-gtk1 |
mozilla -- security icon spoofing
|
| mozilla-gtk1 |
mozilla -- NULL bytes in FTP URLs
|
| mozilla-gtk1 |
mozilla -- automated file upload
|
| mozilla-gtk1 |
mozilla -- built-in CA certificates may be overridden
|
| mozilla-gtk1 |
mozilla -- SOAPParameter integer overflow
|
| mozilla-gtk1 |
Mutiple browser frame injection vulnerability
|
| mozilla-gtk1 |
libpng stack-based buffer overflow and other code concerns
|
| mozilla-gtk1 |
libpng stack-based buffer overflow and other code concerns
|
| mozilla-gtk1 |
Mozilla / Firefox user interface spoofing vulnerability
|
| mozilla-gtk1 |
Mozilla certificate spoofing
|
| mozilla-gtk1 |
Mozilla / Firefox user interface spoofing vulnerability
|
| mozilla-gtk1 |
Mozilla certificate spoofing
|
| mozilla-gtk2 |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-gtk2 |
firefox & mozilla -- command line URL shell command injection
|
| mozilla-gtk2 |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla-gtk2 |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-gtk2 |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla-gtk2 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla-gtk2 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla-gtk2 |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla-gtk2 |
mozilla -- code execution through javascript: favicons
|
| mozilla-gtk2 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla-gtk2 |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla-gtk2 |
mozilla -- insecure temporary directory vulnerability
|
| mozilla-gtk2 |
mozilla -- arbitrary code execution vulnerability
|
| mozilla-gtk2 |
web browsers -- window injection vulnerabilities
|
| mozilla-gtk2 |
mozilla -- insecure permissions for some downloaded files
|
| mozilla-gtk2 |
mozilla -- heap overflow in NNTP handler
|
| mozilla-gtk2 |
mozilla -- scripting vulnerabilities
|
| mozilla-gtk2 |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla-gtk2 |
mozilla -- hostname spoofing bug
|
| mozilla-gtk2 |
mozilla -- BMP decoder vulnerabilities
|
| mozilla-thunderbird |
mozilla -- multiple vulnerabilities
|
| mozilla-thunderbird |
mozilla -- multiple vulnerabilities
|
| mozilla-thunderbird |
mozilla -- multiple vulnerabilities
|
| mozilla-thunderbird |
thunderbird -- javascript execution
|
| mozilla-thunderbird |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-thunderbird |
firefox & mozilla -- command line URL shell command injection
|
| mozilla-thunderbird |
firefox & mozilla -- buffer overflow vulnerability
|
| mozilla-thunderbird |
firefox & mozilla -- multiple vulnerabilities
|
| mozilla-thunderbird |
mozilla -- privilege escalation via non-DOM property overrides
|
| mozilla-thunderbird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| mozilla-thunderbird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| mozilla-thunderbird |
mozilla -- privilege escalation via DOM property overrides
|
| mozilla-thunderbird |
mozilla -- code execution through javascript: favicons
|
| mozilla-thunderbird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| mozilla-thunderbird |
mozilla -- heap buffer overflow in GIF image processing
|
| mozilla-thunderbird |
mozilla -- insecure temporary directory vulnerability
|
| mozilla-thunderbird |
mozilla -- arbitrary code execution vulnerability
|
| mozilla-thunderbird |
web browsers -- window injection vulnerabilities
|
| mozilla-thunderbird |
mozilla -- insecure permissions for some downloaded files
|
| mozilla-thunderbird |
mozilla -- scripting vulnerabilities
|
| mozilla-thunderbird |
mozilla -- users may be lured into bypassing security dialogs
|
| mozilla-thunderbird |
mozilla -- hostname spoofing bug
|
| mozilla-thunderbird |
mozilla -- BMP decoder vulnerabilities
|
| mpg123 |
mpg123 -- buffer overflow vulnerability
|
| mpg123 |
mpg123 -- playlist processing buffer overflow vulnerability
|
| mpg123 |
mpg123 -- buffer overflow in URL handling
|
| mpg123 |
mpg123 buffer overflow
|
| mpg123 |
mpg123 vulnerabilities
|
| mpg123 |
mpg123 layer 2 decoder buffer overflow
|
| mpg123-esound |
mpg123 -- buffer overflow vulnerability
|
| mpg123-esound |
mpg123 -- playlist processing buffer overflow vulnerability
|
| mpg123-esound |
mpg123 -- buffer overflow in URL handling
|
| mpg123-esound |
mpg123 buffer overflow
|
| mpg123-esound |
mpg123 vulnerabilities
|
| mpg123-nas |
mpg123 -- buffer overflow vulnerability
|
| mpg123-nas |
mpg123 -- playlist processing buffer overflow vulnerability
|
| mpg123-nas |
mpg123 -- buffer overflow in URL handling
|
| mpg123-nas |
mpg123 buffer overflow
|
| mpg123-nas |
mpg123 vulnerabilities
|
| mplayer |
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
|
| mplayer |
mplayer -- Multiple integer overflows
|
| mplayer |
mplayer -- heap overflow in the ASF demuxer
|
| mplayer |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| mplayer |
libxine -- multiple buffer overflows in RTSP
|
| mplayer |
mplayer -- multiple vulnerabilities
|
| mplayer |
mplayer heap overflow in http requests
|
| mplayer-esound |
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
|
| mplayer-esound |
mplayer -- Multiple integer overflows
|
| mplayer-esound |
mplayer -- heap overflow in the ASF demuxer
|
| mplayer-esound |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| mplayer-esound |
libxine -- multiple buffer overflows in RTSP
|
| mplayer-esound |
mplayer -- multiple vulnerabilities
|
| mplayer-esound |
mplayer heap overflow in http requests
|
| mplayer-gtk |
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
|
| mplayer-gtk |
mplayer -- Multiple integer overflows
|
| mplayer-gtk |
mplayer -- heap overflow in the ASF demuxer
|
| mplayer-gtk |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| mplayer-gtk |
libxine -- multiple buffer overflows in RTSP
|
| mplayer-gtk |
mplayer -- multiple vulnerabilities
|
| mplayer-gtk |
mplayer heap overflow in http requests
|
| mplayer-gtk-esound |
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
|
| mplayer-gtk-esound |
mplayer -- Multiple integer overflows
|
| mplayer-gtk-esound |
mplayer -- heap overflow in the ASF demuxer
|
| mplayer-gtk-esound |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| mplayer-gtk-esound |
libxine -- multiple buffer overflows in RTSP
|
| mplayer-gtk-esound |
mplayer -- multiple vulnerabilities
|
| mplayer-gtk-esound |
mplayer heap overflow in http requests
|
| mplayer-gtk2 |
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
|
| mplayer-gtk2 |
mplayer -- Multiple integer overflows
|
| mplayer-gtk2 |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| mplayer-gtk2 |
libxine -- multiple buffer overflows in RTSP
|
| mplayer-gtk2 |
mplayer -- multiple vulnerabilities
|
| mplayer-gtk2-esound |
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
|
| mplayer-gtk2-esound |
mplayer -- Multiple integer overflows
|
| mplayer-gtk2-esound |
mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
|
| mplayer-gtk2-esound |
libxine -- multiple buffer overflows in RTSP
|
| mplayer-gtk2-esound |
mplayer -- multiple vulnerabilities
|
| mplayer{,-gtk}{,-esound} |
MPlayer remotely exploitable buffer overflow in the ASX parser
|
| mplayer{,-gtk}{,-esound} |
MPlayer remotely exploitable buffer overflow in the HTTP parser
|
| MT |
MT -- Search Unspecified XSS
|
| mule-common |
emacs -- movemail format string vulnerability
|
| multi-gnome-terminal |
Possible information leak in multi-gnome-terminal
|
| mupad |
xpm -- image decoding vulnerabilities
|
| mutt |
mutt -- Remote Buffer Overflow Vulnerability
|
| mutt |
Buffer overflow in Mutt 1.4
|
| mutt-devel |
mutt -- Remote Buffer Overflow Vulnerability
|
| mutt-devel-lite |
mutt -- Remote Buffer Overflow Vulnerability
|
| mutt-lite |
mutt -- Remote Buffer Overflow Vulnerability
|
| mutt-ng |
mutt -- Remote Buffer Overflow Vulnerability
|
| mysql-client |
mysql -- mysql_real_connect buffer overflow vulnerability
|
| mysql-client |
mysql -- heap buffer overflow with prepared statements
|
| mysql-client |
MySQL insecure temporary file creation (mysqlbug)
|
| mysql-scripts |
mysql-scripts -- mysqlaccess insecure temporary file creation
|
| mysql-scripts |
mysql -- mysqlhotcopy insecure temporary file creation
|
| mysql-server |
mysql -- database suid privilege escalation
|
| mysql-server |
mysql -- database "case-sensitive" privilege escalation
|
| mysql-server |
mysql -- format string vulnerability
|
| mysql-server |
MySQL -- SQL-injection security vulnerability
|
| mysql-server |
MySQL -- Information Disclosure and Buffer Overflow Vulnerabilities
|
| mysql-server |
mysql50-server -- COM_TABLE_DUMP arbitrary code execution
|
| mysql-server |
mysql-server -- insecure temporary file creation
|
| mysql-server |
mysql-server -- multiple remote vulnerabilities
|
| mysql-server |
mysql -- GRANT access restriction problem
|
| mysql-server |
mysql -- ALTER MERGE denial of service vulnerability
|
| mysql-server |
mysql -- FTS request denial of service vulnerability
|
| mysql-server |
mysql -- mysql_real_connect buffer overflow vulnerability
|
| mysql-server |
mysql -- erroneous access restrictions applied to table renames
|
| mysql-server |
mysql -- heap buffer overflow with prepared statements
|
| mysql-server |
MySQL authentication bypass / buffer overflow
|
| mysql-server |
MySQL authentication bypass / buffer overflow
|
| nag |
nag -- Cross site scripting vulnerabilities in several of the tasklist name and task data fields
|
| nap |
nap allows arbitrary file access
|
| nbd-server |
nbd-server -- buffer overflow vulnerability
|
| nbsmtp |
nbsmtp -- format string vulnerability
|
| neon |
neon date parsing vulnerability
|
| neon |
neon format string vulnerabilities
|
| nessus |
Nessus "adduser" race condition vulnerability
|
| nessus-devel |
Nessus "adduser" race condition vulnerability
|
| net-snmp |
net-snmp -- fixproc insecure temporary file creation
|
| net-snmp |
net-snmp -- remote DoS vulnerability
|
| netpbm |
netpbm -- buffer overflow in pnmtopng
|
| netscape-communicator |
libpng stack-based buffer overflow and other code concerns
|
| netscape-navigator |
libpng stack-based buffer overflow and other code concerns
|
| netscape-{communicator,navigator} |
libpng stack-based buffer overflow and other code concerns
|
| netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| netscape7 |
firefox & mozilla -- command line URL shell command injection
|
| netscape7 |
firefox & mozilla -- buffer overflow vulnerability
|
| netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| netscape7 |
mozilla -- privilege escalation via non-DOM property overrides
|
| netscape7 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| netscape7 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| netscape7 |
mozilla -- privilege escalation via DOM property overrides
|
| netscape7 |
mozilla -- code execution through javascript: favicons
|
| netscape7 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| netscape7 |
mozilla -- heap buffer overflow in GIF image processing
|
| netscape7 |
mozilla -- insecure temporary directory vulnerability
|
| netscape7 |
mozilla -- arbitrary code execution vulnerability
|
| netscape7 |
web browsers -- window injection vulnerabilities
|
| netscape7 |
mozilla -- insecure permissions for some downloaded files
|
| netscape7 |
mozilla -- heap overflow in NNTP handler
|
| netscape7 |
mozilla -- scripting vulnerabilities
|
| netscape7 |
mozilla -- users may be lured into bypassing security dialogs
|
| netscape7 |
mozilla -- hostname spoofing bug
|
| netscape7 |
mozilla -- BMP decoder vulnerabilities
|
| netscape7 |
mozilla -- POP client heap overflow
|
| netscape7 |
mozilla -- SOAPParameter integer overflow
|
| netscape7 |
Mutiple browser frame injection vulnerability
|
| netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| newsfetch |
newsfetch -- server response buffer overflow vulnerability
|
| newsgrab |
newsgrab -- insecure file and directory creation
|
| newsgrab |
newsgrab -- directory traversal vulnerability
|
| newspost |
newspost -- server response buffer overflow vulnerability
|
| ngircd |
ngircd -- format string vulnerability
|
| ngircd |
ngircd -- buffer overflow vulnerability
|
| nl-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| nl-openoffice |
openoffice -- document disclosure
|
| nss |
nss -- exploitable buffer overflow in SSLv2 protocol handler
|
| nss |
Mozilla / NSS S/MIME DoS vulnerability
|
| nvidia-driver |
nvidia-driver -- arbitrary root code execution vulnerability
|
| nwclient |
nwclient -- multiple vulnerabilities
|
| oftpd |
oftpd denial-of-service vulnerability (PORT command)
|
| oops |
oops -- format string vulnerability
|
| open-motif |
xpm -- image decoding vulnerabilities
|
| open-motif-devel |
xpm -- image decoding vulnerabilities
|
| opendchub |
Open DC Hub -- remote buffer overflow vulnerability
|
| openh323 |
Vulnerabilities in H.323 implementations
|
| openldap-sasl-server |
openldap -- slapd acl selfwrite Security Issue
|
| openldap-server |
openldap -- slapd acl selfwrite Security Issue
|
| openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| openoffice |
openoffice -- document disclosure
|
| openssh |
openssh -- multiple vulnerabilities
|
| openssh-portable |
openssh -- multiple vulnerabilities
|
| openssl |
openssl -- Incorrect PKCS#1 v1.5 padding validation in
crypto(3)
|
| openssl |
openssl -- potential SSL 2.0 rollback
|
| openssl |
OpenSSL ChangeCipherSpec denial-of-service vulnerability
|
| openssl-beta |
openssl -- potential SSL 2.0 rollback
|
| openssl-beta |
OpenSSL ChangeCipherSpec denial-of-service vulnerability
|
| openssl-beta-overwrite-base |
openssl -- potential SSL 2.0 rollback
|
| openssl-overwrite-base |
openssl -- potential SSL 2.0 rollback
|
| openvpn |
openvpn -- LD_PRELOAD code execution on client through malicious or compromised server
|
| openvpn |
openvpn -- potential denial-of-service on servers in TCP mode
|
| openvpn |
openvpn -- arbitrary code execution on client through malicious or compromised server
|
| openvpn |
openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server
|
| openvpn |
openvpn -- denial of service: malicious authenticated "tap" client can deplete server virtual memory
|
| openvpn |
openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients
|
| openvpn |
openvpn -- denial of service: client certificate validation can disconnect unrelated clients
|
| openwebmail |
"Content-Type" XSS vulnerability affecting other webmail systems
|
| opera |
opera -- multiple vulnerabilities
|
| opera |
opera -- URL parsing heap overflow vulnerability
|
| opera |
opera -- RSA Signature Forgery
|
| opera |
opera -- multiple vulnerabilities
|
| opera |
opera -- command line URL shell command injection
|
| opera |
opera -- image dragging vulnerability
|
| opera |
opera -- download dialog spoofing vulnerability
|
| opera |
opera -- XMLHttpRequest security bypass
|
| opera |
opera -- "javascript:" URL cross-site scripting vulnerability
|
| opera |
opera -- redirection cross-site scripting vulnerability
|
| opera |
opera -- "data:" URI handler spoofing vulnerability
|
| opera |
opera -- kfmclient exec command execution vulnerability
|
| opera |
web browsers -- window injection vulnerabilities
|
| opera |
opera -- multiple vulnerabilities in Java implementation
|
| opera |
Mutiple browser frame injection vulnerability
|
| opera |
URI handler vulnerabilities in several browsers
|
| opera-devel |
opera -- multiple vulnerabilities
|
| opera-devel |
opera -- URL parsing heap overflow vulnerability
|
| opera-devel |
opera -- RSA Signature Forgery
|
| opera-devel |
opera -- multiple vulnerabilities
|
| opera-devel |
opera -- command line URL shell command injection
|
| opera-devel |
opera -- image dragging vulnerability
|
| opera-devel |
opera -- download dialog spoofing vulnerability
|
| opera-devel |
opera -- XMLHttpRequest security bypass
|
| opera-devel |
opera -- "javascript:" URL cross-site scripting vulnerability
|
| opera-devel |
opera -- redirection cross-site scripting vulnerability
|
| opera-devel |
opera -- "data:" URI handler spoofing vulnerability
|
| opera-devel |
opera -- kfmclient exec command execution vulnerability
|
| opera-devel |
web browsers -- window injection vulnerabilities
|
| opera-devel |
opera -- multiple vulnerabilities in Java implementation
|
| p5-Archive-Zip |
p5-Archive-Zip -- virus detection evasion
|
| p5-Crypt-OpenPGP |
gnupg -- OpenPGP symmetric encryption vulnerability
|
| p5-DBI |
p5-DBI -- insecure temporary file creation vulnerability
|
| p5-DBI-137 |
p5-DBI -- insecure temporary file creation vulnerability
|
| p5-Mail-SpamAssassin |
p5-Mail-SpamAssassin -- long message header denial of service
|
| p5-Mail-SpamAssassin |
p5-Mail-SpamAssassin -- denial of service vulnerability
|
| p5-Mail-SpamAssassin |
SpamAssassin -- denial-of-service in tokenize_headers
|
| p5-Mail-SpamAssassin |
SpamAssassin DoS vulnerability
|
| pam_ldap |
pam_ldap -- authentication bypass vulnerability
|
| pam_smb |
Buffer overflow in pam_smb password handling
|
| paraview |
tiff -- buffer overflow vulnerability
|
| paraview |
tiff -- divide-by-zero denial-of-service
|
| paraview |
tiff -- directory entry count integer overflow vulnerability
|
| paraview |
tiff -- multiple integer overflows
|
| paraview |
tiff -- RLE decoder heap overflows
|
| pavuk |
Pavuk HTTP Location header overflow
|
| pavuk |
pavuk digest auth buffer overflow
|
| pcal |
pcal -- buffer overflow vulnerabilities
|
| pcre |
pcre -- regular expression buffer overflow
|
| pcre-utf8 |
pcre -- regular expression buffer overflow
|
| pdflib |
tiff -- buffer overflow vulnerability
|
| pdflib |
tiff -- divide-by-zero denial-of-service
|
| pdflib |
tiff -- directory entry count integer overflow vulnerability
|
| pdflib |
tiff -- multiple integer overflows
|
| pdflib |
tiff -- RLE decoder heap overflows
|
| pdflib-perl |
tiff -- buffer overflow vulnerability
|
| pdflib-perl |
tiff -- divide-by-zero denial-of-service
|
| pdflib-perl |
tiff -- directory entry count integer overflow vulnerability
|
| pdflib-perl |
tiff -- multiple integer overflows
|
| pdflib-perl |
tiff -- RLE decoder heap overflows
|
| pdftohtml |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| pdftohtml |
xpdf -- buffer overflow vulnerability
|
| pear-PEAR |
pear-PEAR -- PEAR installer arbitrary code execution vulnerability
|
| pear-XML_RPC |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| pear-XML_RPC |
pear-XML_RPC -- information disclosure vulnerabilities
|
| pear-XML_RPC |
pear-XML_RPC -- arbitrary remote code execution
|
| perl |
perl, webmin, usermin -- perl format string integer wrap vulnerability
|
| perl |
perl -- vulnerabilities in PERLIO_DEBUG handling
|
| perl |
perl -- File::Path insecure file/directory permissions
|
| pgp |
gnupg -- OpenPGP symmetric encryption vulnerability
|
| phoenix |
firefox & mozilla -- multiple vulnerabilities
|
| phoenix |
firefox & mozilla -- command line URL shell command injection
|
| phoenix |
firefox & mozilla -- buffer overflow vulnerability
|
| phoenix |
firefox & mozilla -- multiple vulnerabilities
|
| phoenix |
mozilla -- privilege escalation via non-DOM property overrides
|
| phoenix |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| phoenix |
mozilla -- code execution via javascript: IconURL vulnerability
|
| phoenix |
mozilla -- privilege escalation via DOM property overrides
|
| phoenix |
mozilla -- code execution through javascript: favicons
|
| phoenix |
mozilla -- javascript "lambda" replace exposes memory contents
|
| phoenix |
mozilla -- heap buffer overflow in GIF image processing
|
| phoenix |
mozilla -- insecure temporary directory vulnerability
|
| phoenix |
mozilla -- arbitrary code execution vulnerability
|
| phoenix |
web browsers -- window injection vulnerabilities
|
| phoenix |
mozilla -- insecure permissions for some downloaded files
|
| phoenix |
mozilla -- scripting vulnerabilities
|
| phoenix |
mozilla -- users may be lured into bypassing security dialogs
|
| phoenix |
mozilla -- hostname spoofing bug
|
| phoenix |
mozilla -- BMP decoder vulnerabilities
|
| php-suhosin |
php -- open_basedir Race Condition Vulnerability
|
| php4 |
php -- open_basedir Race Condition Vulnerability
|
| php4 |
php -- multiple vulnerabilities
|
| php4 |
PHP -- multiple vulnerabilities
|
| php4 |
php -- readfile() DoS vulnerability
|
| php4 |
php -- multiple vulnerabilities
|
| php4 |
php -- php_variables memory disclosure
|
| php4 |
php -- strip_tags cross-site scripting vulnerability
|
| php4 |
php -- memory_limit related vulnerability
|
| php4 |
php -- vulnerability in RFC 1867 file upload processing
|
| php4 |
PHP memory_limit and strip_tags() vulnerabilities
|
| php4-cgi |
php -- open_basedir Race Condition Vulnerability
|
| php4-cgi |
php -- multiple vulnerabilities
|
| php4-cgi |
PHP -- multiple vulnerabilities
|
| php4-cgi |
php -- readfile() DoS vulnerability
|
| php4-cgi |
php -- multiple vulnerabilities
|
| php4-cgi |
php -- php_variables memory disclosure
|
| php4-cgi |
php -- strip_tags cross-site scripting vulnerability
|
| php4-cgi |
php -- memory_limit related vulnerability
|
| php4-cgi |
php -- vulnerability in RFC 1867 file upload processing
|
| php4-cli |
php -- open_basedir Race Condition Vulnerability
|
| php4-cli |
php -- multiple vulnerabilities
|
| php4-cli |
PHP -- multiple vulnerabilities
|
| php4-cli |
php -- readfile() DoS vulnerability
|
| php4-cli |
php -- multiple vulnerabilities
|
| php4-cli |
php -- php_variables memory disclosure
|
| php4-cli |
php -- strip_tags cross-site scripting vulnerability
|
| php4-cli |
php -- memory_limit related vulnerability
|
| php4-dtc |
php -- open_basedir Race Condition Vulnerability
|
| php4-dtc |
php -- multiple vulnerabilities
|
| php4-dtc |
PHP -- multiple vulnerabilities
|
| php4-dtc |
php -- readfile() DoS vulnerability
|
| php4-dtc |
php -- multiple vulnerabilities
|
| php4-dtc |
php -- php_variables memory disclosure
|
| php4-dtc |
php -- strip_tags cross-site scripting vulnerability
|
| php4-dtc |
php -- memory_limit related vulnerability
|
| php4-horde |
php -- open_basedir Race Condition Vulnerability
|
| php4-horde |
php -- multiple vulnerabilities
|
| php4-horde |
PHP -- multiple vulnerabilities
|
| php4-horde |
php -- readfile() DoS vulnerability
|
| php4-horde |
php -- multiple vulnerabilities
|
| php4-horde |
php -- php_variables memory disclosure
|
| php4-horde |
php -- strip_tags cross-site scripting vulnerability
|
| php4-horde |
php -- memory_limit related vulnerability
|
| php4-nms |
php -- open_basedir Race Condition Vulnerability
|
| php4-nms |
php -- multiple vulnerabilities
|
| php4-nms |
PHP -- multiple vulnerabilities
|
| php4-nms |
php -- readfile() DoS vulnerability
|
| php4-nms |
php -- multiple vulnerabilities
|
| php4-nms |
php -- php_variables memory disclosure
|
| php4-nms |
php -- strip_tags cross-site scripting vulnerability
|
| php4-nms |
php -- memory_limit related vulnerability
|
| php4-{cgi,cli,dtc,horde,nms} |
PHP memory_limit and strip_tags() vulnerabilities
|
| php5 |
php -- _ecalloc Integer Overflow Vulnerability
|
| php5 |
php -- open_basedir Race Condition Vulnerability
|
| php5 |
php -- multiple vulnerabilities
|
| php5 |
php -- multiple vulnerabilities
|
| php5 |
php -- php_variables memory disclosure
|
| php5 |
php -- strip_tags cross-site scripting vulnerability
|
| php5 |
php -- memory_limit related vulnerability
|
| php5 |
php -- vulnerability in RFC 1867 file upload processing
|
| php5 |
PHP memory_limit and strip_tags() vulnerabilities
|
| php5-cgi |
php -- _ecalloc Integer Overflow Vulnerability
|
| php5-cgi |
php -- open_basedir Race Condition Vulnerability
|
| php5-cgi |
php -- multiple vulnerabilities
|
| php5-cgi |
php -- multiple vulnerabilities
|
| php5-cgi |
php -- php_variables memory disclosure
|
| php5-cgi |
php -- strip_tags cross-site scripting vulnerability
|
| php5-cgi |
php -- memory_limit related vulnerability
|
| php5-cgi |
php -- vulnerability in RFC 1867 file upload processing
|
| php5-cli |
php -- _ecalloc Integer Overflow Vulnerability
|
| php5-cli |
php -- open_basedir Race Condition Vulnerability
|
| php5-cli |
php -- multiple vulnerabilities
|
| php5-cli |
php -- multiple vulnerabilities
|
| php5-cli |
php -- php_variables memory disclosure
|
| php5-cli |
php -- strip_tags cross-site scripting vulnerability
|
| php5-cli |
php -- memory_limit related vulnerability
|
| php5-dtc |
php -- _ecalloc Integer Overflow Vulnerability
|
| php5-dtc |
php -- open_basedir Race Condition Vulnerability
|
| php5-dtc |
php -- multiple vulnerabilities
|
| php5-horde |
php -- _ecalloc Integer Overflow Vulnerability
|
| php5-horde |
php -- open_basedir Race Condition Vulnerability
|
| php5-horde |
php -- multiple vulnerabilities
|
| php5-nms |
php -- _ecalloc Integer Overflow Vulnerability
|
| php5-nms |
php -- open_basedir Race Condition Vulnerability
|
| php5-nms |
php -- multiple vulnerabilities
|
| php5-{cgi,cli} |
PHP memory_limit and strip_tags() vulnerabilities
|
| phpAdsNew |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| phpbb |
phpbb -- NULL byte injection vulnerability
|
| phpbb |
phpbb -- multiple vulnerabilities
|
| phpbb |
phpbb -- multiple vulnerabilities
|
| phpbb |
phpbb -- remote PHP code execution vulnerability
|
| phpbb |
phpbb - Insuffient check against HTML code in usercp_register.php
|
| phpbb |
phpbb -- privilege elevation and path disclosure
|
| phpbb |
phpbb -- multiple information disclosure vulnerabilities
|
| phpbb |
phpbb -- arbitrary command execution and other vulnerabilities
|
| phpbb |
phpBB session table exhaustion
|
| phpbb |
phpBB IP address spoofing
|
| phpbb |
Critical SQL injection in phpBB
|
| phpbb |
multiple vulnerabilities in phpBB
|
| phpbb |
phpBB cross site scripting vulnerabilities
|
| phpgedview |
phpGedView: muliple vulnerabilities
|
| phpgroupware |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| phpicalendar |
phpicalendar -- cross site scripting vulnerability
|
| phpicalendar |
phpicalendar -- file disclosure vulnerability
|
| phpldapadmin098 |
phpldapadmin -- Cross-Site Scripting and Script Insertion vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- XSRF vulnerabilities
|
| phpmyadmin |
phpmyadmin -- cross site scripting vulnerability
|
| phpMyAdmin |
phpmyadmin -- XSRF vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- XSS vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- 'set_theme' Cross-Site Scripting
|
| phpMyAdmin |
phpmyadmin -- register_globals emulation "import_blacklist" manipulation
|
| phpMyAdmin |
phpmyadmin -- XSS vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- HTTP Response Splitting vulnerability
|
| phpMyAdmin |
phpmyadmin -- local file inclusion vulnerability
|
| phpmyadmin |
phpmyadmin -- cross site scripting vulnerability
|
| phpMyAdmin |
phpmyadmin -- cross site scripting vulnerability
|
| phpmyadmin |
phpmyadmin -- increased privilege vulnerability
|
| phpMyAdmin |
phpmyadmin -- increased privilege vulnerability
|
| phpmyadmin |
phpmyadmin -- information disclosure vulnerability
|
| phpMyAdmin |
phpmyadmin -- information disclosure vulnerability
|
| phpmyadmin |
phpmyadmin -- arbitrary file include and XSS vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- arbitrary file include and XSS vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- command execution vulnerability
|
| phpMyAdmin |
phpmyadmin -- file disclosure vulnerability
|
| phpMyAdmin |
phpMyAdmin -- cross-site scripting vulnerabilities
|
| phpMyAdmin |
phpmyadmin -- remote command execution vulnerability
|
| phpmyadmin |
phpmyadmin -- remote command execution vulnerability
|
| phpMyAdmin |
Remote code injection in phpMyAdmin
|
| phpMyAdmin |
file disclosure in phpMyAdmin
|
| phpMyAdmin |
phpMyAdmin configuration manipulation and code injection
|
| phpmyfaq |
phpmyfaq -- SQL injection, takeover, path disclosure, remote code execution
|
| phpmyfaq |
pear-XML_RPC -- remote PHP code injection vulnerability
|
| phpnuke |
Several vulnerabilities found in PHPNuke
|
| phpnuke |
SQL injection vulnerability in phpnuke
|
| phppgadmin |
phppgadmin -- "formLanguage" local file inclusion vulnerability
|
| phpSysInfo |
phpSysInfo -- "register_globals" emulation layer overwrite vulnerability
|
| phpSysInfo |
phpSysInfo -- cross site scripting vulnerability
|
| phpwebftp |
phpwebftp -- "language" Local File Inclusion
|
| picasm |
picasm -- buffer overflow vulnerability
|
| pine |
pine remotely exploitable buffer overflow in newmail.c
|
| pine |
pine insecure URL handling
|
| pine |
pine remote denial-of-service attack
|
| pine |
pine remotely exploitable vulnerabilities
|
| pine4-ssl |
pine remotely exploitable buffer overflow in newmail.c
|
| pl-ekg |
libgadu -- multiple vulnerabilities
|
| pl-ekg |
ekg -- insecure temporary file creation
|
| pl-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| pl-openoffice |
openoffice -- document disclosure
|
| plans |
plans -- multiple vulnerabilities
|
| plone |
plone -- user can masquerade as a group
|
| plone |
plone -- unprotected MembershipTool methods
|
| plone |
plone -- "member_id" Parameter Portrait Manipulation Vulnerability
|
| png |
libpng stack-based buffer overflow and other code concerns
|
| png |
libpng stack-based buffer overflow and other code concerns
|
| png |
libpng denial-of-service
|
| png |
libpng denial-of-service
|
| png |
libpng row buffer overflow
|
| pop3proxy |
up-imapproxy -- multiple vulnerabilities
|
| popfile |
popfile file disclosure
|
| portupgrade |
portupgrade -- insecure temporary file handling vulnerability
|
| postgresql |
postgresql -- encoding based SQL injection
|
| postgresql |
postgresql -- multiple vulnerabilities
|
| postgresql |
postgresql -- character conversion and tsearch2 vulnerabilities
|
| postgresql |
postgresql -- multiple buffer overflows in PL/PgSQL parser
|
| postgresql |
postgresql -- privilege escalation vulnerability
|
| postgresql-contrib |
postgresql-contrib -- insecure temporary file creation
|
| postgresql-devel |
postgresql -- privilege escalation vulnerability
|
| postgresql-server |
postgresql -- encoding based SQL injection
|
| postgresql-server |
postgresql -- multiple vulnerabilities
|
| postgresql-server |
postgresql81-server -- SET ROLE privilege escalation
|
| postgresql-server |
postgresql -- multiple buffer overflows in PL/PgSQL parser
|
| postgresql-server |
postgresql -- privilege escalation vulnerability
|
| postnuke |
postnuke -- admin section SQL injection
|
| postnuke |
postnuke -- multiple vulnerabilities
|
| postnuke |
postnuke -- SQL injection vulnerabilities
|
| postnuke |
postnuke -- cross-site scripting (XSS) vulnerabilities
|
| pound |
pound remotely exploitable vulnerability
|
| powerdns |
PowerDNS -- LDAP backend fails to escape all queries
|
| powerdns |
powerdns -- DoS vulnerability
|
| ppxp |
ppxp -- local root exploit
|
| proftpd |
proftpd -- remote code execution vulnerabilities
|
| proftpd |
proftpd -- Remote Code Execution Vulnerability
|
| proftpd |
proftpd -- format string vulnerabilities
|
| proftpd |
proftpd IP address access control list breakage
|
| proftpd |
ProFTPD ASCII translation bug resulting in remote root compromise
|
| proftpd-mysql |
proftpd -- remote code execution vulnerabilities
|
| proftpd-mysql |
proftpd -- Remote Code Execution Vulnerability
|
| proftpd-mysql |
proftpd -- format string vulnerabilities
|
| proxytunnel |
proxytunnel -- format string vulnerability
|
| prozilla |
ProZilla -- server response buffer overflow vulnerabilities
|
| pt-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| pt-openoffice |
openoffice -- document disclosure
|
| pt_BR-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| pt_BR-netscape7 |
firefox & mozilla -- command line URL shell command injection
|
| pt_BR-netscape7 |
firefox & mozilla -- buffer overflow vulnerability
|
| pt_BR-netscape7 |
firefox & mozilla -- multiple vulnerabilities
|
| pt_BR-netscape7 |
mozilla -- privilege escalation via non-DOM property overrides
|
| pt_BR-netscape7 |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| pt_BR-netscape7 |
mozilla -- code execution via javascript: IconURL vulnerability
|
| pt_BR-netscape7 |
mozilla -- privilege escalation via DOM property overrides
|
| pt_BR-netscape7 |
mozilla -- code execution through javascript: favicons
|
| pt_BR-netscape7 |
mozilla -- javascript "lambda" replace exposes memory contents
|
| pt_BR-netscape7 |
mozilla -- heap buffer overflow in GIF image processing
|
| pt_BR-netscape7 |
mozilla -- insecure temporary directory vulnerability
|
| pt_BR-netscape7 |
mozilla -- arbitrary code execution vulnerability
|
| pt_BR-netscape7 |
web browsers -- window injection vulnerabilities
|
| pt_BR-netscape7 |
mozilla -- insecure permissions for some downloaded files
|
| pt_BR-netscape7 |
mozilla -- heap overflow in NNTP handler
|
| pt_BR-netscape7 |
mozilla -- scripting vulnerabilities
|
| pt_BR-netscape7 |
mozilla -- users may be lured into bypassing security dialogs
|
| pt_BR-netscape7 |
mozilla -- hostname spoofing bug
|
| pt_BR-netscape7 |
mozilla -- BMP decoder vulnerabilities
|
| pt_BR-netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| pt_BR-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| pt_BR-openoffice |
openoffice -- document disclosure
|
| pubcookie-login-server |
pubcookie-login-server -- cross site scripting vulnerability
|
| punbb |
punbb -- NULL byte injection vulnerability
|
| pure-ftpd |
Pure-FTPd DoS when maximum number of connections is reached
|
| putty |
putty -- pscp/psftp heap corruption vulnerabilities
|
| putty |
putty -- buffer overflow vulnerability in ssh2 support
|
| putty |
modified server can execute commands on the client
|
| pwlib |
Vulnerabilities in H.323 implementations
|
| python |
python -- buffer overrun in repr() for unicode strings
|
| python |
python -- SimpleXMLRPCServer.py allows unrestricted traversal
|
| python+ipv6 |
python -- buffer overrun in repr() for unicode strings
|
| python+ipv6 |
python -- SimpleXMLRPCServer.py allows unrestricted traversal
|
| qpopper |
qpopper -- multiple privilege escalation vulnerabilities
|
| qpopper |
qpopper format string vulnerability
|
| qt |
kdelibs -- integer overflow in khtml
|
| qt |
qt -- image loader vulnerabilities
|
| qt |
Qt 3.x BMP heap-based overflow, GIF and XPM DoS NULL pointer dereference
|
| qt-copy |
kdelibs -- integer overflow in khtml
|
| quagga |
zebra/quagga denial of service vulnerability
|
| quake2forge |
quake2 -- multiple critical vulnerabilities
|
| quake2lnx |
quake2 -- multiple critical vulnerabilities
|
| racoon |
racoon -- remote denial-of-service
|
| racoon |
racoon -- improper certificate handling
|
| racoon |
racoon remote denial of service vulnerability (ISAKMP header length field)
|
| racoon |
racoon remote denial of service vulnerability (IKE Generic Payload Header)
|
| racoon |
racoon fails to verify signature during Phase 1
|
| racoon |
tcpdump ISAKMP payload handling remote denial-of-service
|
| racoon |
racoon security association deletion vulnerability
|
| racoon |
Racoon may validate invalid certificates
|
| razor-agents |
razor-agents -- denial of service vulnerability
|
| rinetd |
fd_set -- bitmap index overflow in multiple applications
|
| ripmime |
ripMIME -- decoding bug allowing content filter bypass
|
| rlpr |
rlpr "msg()" buffer overflow and format string vulnerabilities
|
| rockdodger |
rockdodger -- buffer overflows
|
| roundup |
Roundup remote file disclosure vulnerability
|
| rsnapshot |
rsnapshot -- local privilege escalation
|
| rssh |
rssh -- privilege escalation vulnerability
|
| rssh |
rssh & scponly -- arbitrary command execution
|
| rssh |
rssh -- format string vulnerability
|
| rssh |
rssh -- file name disclosure bug
|
| rssh |
rssh file existence information disclosure weakness
|
| rsync |
rsync -- path sanitizing vulnerability
|
| rsync |
rsync path traversal issue
|
| rsync |
rsync buffer overflow in server mode
|
| ru-apache |
apache -- mod_rewrite buffer overflow vulnerability
|
| ru-apache |
apache -- mod_imap cross-site scripting flaw
|
| ru-apache |
apache -- http request smuggling
|
| ru-apache |
apache mod_include buffer overflow vulnerability
|
| ru-apache |
Apache 1.3 IP address access control failure on some 64-bit platforms
|
| ru-apache+mod_ssl |
apache -- mod_rewrite buffer overflow vulnerability
|
| ru-apache+mod_ssl |
apache -- mod_imap cross-site scripting flaw
|
| ru-apache+mod_ssl |
apache -- http request smuggling
|
| ru-apache+mod_ssl |
apache mod_include buffer overflow vulnerability
|
| ru-apache+mod_ssl |
mod_ssl -- SSLCipherSuite bypass
|
| ru-apache+mod_ssl |
apache13-modssl -- format string vulnerability in proxy support
|
| ru-apache+mod_ssl |
Apache 1.3 IP address access control failure on some 64-bit platforms
|
| ru-apache+mod_ssl |
mod_proxy buffer overflow (CAN-2004-0492)
|
| ru-apache+mod_ssl |
mod_ssl stack-based buffer overflow
|
| ru-apache+mod_ssl |
mod_ssl format string vulnerability
|
| ru-bogofilter |
bogofilter -- RFC 2047 decoder denial-of-service vulnerability
|
| ru-gaim |
libgadu -- multiple vulnerabilities
|
| ru-gaim |
gaim -- AIM/ICQ non-UTF-8 filename crash
|
| ru-gaim |
gaim -- AIM/ICQ away message buffer overflow
|
| ru-gaim |
gaim -- Yahoo! remote crash vulnerability
|
| ru-gaim |
gaim -- MSN Remote DoS vulnerability
|
| ru-gaim |
gaim -- MSN remote DoS vulnerability
|
| ru-gaim |
gaim -- remote crash on some protocols
|
| ru-gaim |
gaim -- AIM/ICQ remote denial of service vulnerability
|
| ru-gaim |
gaim -- remote DoS on receiving malformed HTML
|
| ru-gaim |
gaim -- jabber remote crash
|
| ru-gaim |
gaim -- remote DoS on receiving certain messages over IRC
|
| ru-gaim |
gaim -- remote DoS on receiving malformed HTML
|
| ru-gaim |
gaim -- MSN denial-of-service vulnerabilities
|
| ru-gaim |
gaim -- Content-Length header denial-of-service vulnerability
|
| ru-gaim |
gaim -- multiple buffer overflows
|
| ru-gaim |
gaim -- heap overflow exploitable by malicious GroupWise server
|
| ru-gaim |
gaim -- malicious smiley themes
|
| ru-gaim |
gaim -- buffer overflow in MSN protocol support
|
| ru-gaim |
gaim remotely exploitable vulnerabilities in MSN component
|
| ru-gaim |
Several remotely exploitable buffer overflows in gaim
|
| ru-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| ru-linux-mozillafirebird |
firefox & mozilla -- command line URL shell command injection
|
| ru-linux-mozillafirebird |
firefox & mozilla -- buffer overflow vulnerability
|
| ru-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| ru-linux-mozillafirebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| ru-linux-mozillafirebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| ru-linux-mozillafirebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| ru-linux-mozillafirebird |
mozilla -- privilege escalation via DOM property overrides
|
| ru-linux-mozillafirebird |
mozilla -- code execution through javascript: favicons
|
| ru-linux-mozillafirebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| ru-linux-mozillafirebird |
mozilla -- heap buffer overflow in GIF image processing
|
| ru-linux-mozillafirebird |
mozilla -- insecure temporary directory vulnerability
|
| ru-linux-mozillafirebird |
mozilla -- arbitrary code execution vulnerability
|
| ru-linux-mozillafirebird |
web browsers -- window injection vulnerabilities
|
| ru-linux-mozillafirebird |
mozilla -- insecure permissions for some downloaded files
|
| ru-linux-mozillafirebird |
mozilla -- scripting vulnerabilities
|
| ru-linux-mozillafirebird |
mozilla -- users may be lured into bypassing security dialogs
|
| ru-linux-mozillafirebird |
mozilla -- hostname spoofing bug
|
| ru-linux-mozillafirebird |
mozilla -- BMP decoder vulnerabilities
|
| ru-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| ru-openoffice |
openoffice -- document disclosure
|
| ruby |
ruby -- cgi.rb library Denial of Service
|
| ruby |
ruby -- cgi.rb library Denial of Service
|
| ruby |
ruby - multiple vulnerabilities
|
| ruby |
ruby -- vulnerability in the safe level settings
|
| ruby |
ruby -- arbitrary command execution on XMLRPC server
|
| ruby |
ruby -- CGI DoS
|
| ruby |
Ruby insecure file permissions in the CGI session management
|
| ruby+oniguruma |
ruby -- cgi.rb library Denial of Service
|
| ruby+oniguruma |
ruby -- cgi.rb library Denial of Service
|
| ruby+pthreads |
ruby -- cgi.rb library Denial of Service
|
| ruby+pthreads |
ruby -- cgi.rb library Denial of Service
|
| ruby+pthreads+oniguruma |
ruby -- cgi.rb library Denial of Service
|
| ruby+pthreads+oniguruma |
ruby -- cgi.rb library Denial of Service
|
| ruby-1.7.0 |
ruby -- CGI DoS
|
| ruby_r |
ruby -- CGI DoS
|
| ruby_static |
ruby -- cgi.rb library Denial of Service
|
| ruby_static |
ruby -- cgi.rb library Denial of Service
|
| ruby_static |
ruby - multiple vulnerabilities
|
| ruby_static |
ruby -- vulnerability in the safe level settings
|
| ruby_static |
ruby -- arbitrary command execution on XMLRPC server
|
| rubygem-rails |
rubygem-rails -- evaluation of ruby code
|
| ruby{,_r,_static} |
ruby CGI::Session insecure file creation
|
| rxvt-unicode |
rxvt-unicode -- restore permissions on tty devices
|
| rxvt-unicode |
rxvt-unicode -- buffer overflow vulnerability
|
| samba |
samba -- memory exhaustion DoS in smbd
|
| samba |
samba -- Exposure of machine account credentials in winbind log files
|
| samba |
samba -- integer overflow vulnerability
|
| samba |
smbd -- buffer-overrun vulnerability
|
| samba |
samba -- potential remote DoS vulnerability
|
| samba |
samba -- remote file disclosure
|
| samba |
Multiple Potential Buffer Overruns in Samba
|
| samba |
Multiple Potential Buffer Overruns in Samba
|
| samba |
Samba 3.0.x password initialization bug
|
| samba3 |
samba3 DoS attack
|
| scorched3d |
Scorched 3D server chat box format string vulnerability
|
| scponly |
scponly -- local privilege escalation exploits
|
| scponly |
rssh & scponly -- arbitrary command execution
|
| screen |
screen -- combined UTF-8 characters vulnerability
|
| se-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| se-openoffice |
openoffice -- document disclosure
|
| seamonkey |
mozilla -- multiple vulnerabilities
|
| seamonkey |
mozilla -- multiple vulnerabilities
|
| seamonkey |
mozilla -- multiple vulnerabilities
|
| sendmail |
sendmail -- race condition vulnerability
|
| serendipity |
Serendipity -- XSS Vulnerabilities
|
| setiathome |
seti@home remotely exploitable buffer overflow
|
| sge |
sge -- local root exploit in bundled rsh executable
|
| sgeee |
sge -- local root exploit in bundled rsh executable
|
| sharutils |
sharutils -- unshar insecure temporary file creation
|
| sharutils |
sharutils -- buffer overflows
|
| shoutcast |
shoutcast -- cross-site scripting, information exposure
|
| shtool |
shtool -- insecure temporary file creation
|
| sircd |
sircd -- remote reverse DNS buffer overflow
|
| sircd |
sircd -- remote operator privilege escalation vulnerability
|
| sitecopy |
neon date parsing vulnerability
|
| sitecopy |
neon format string vulnerabilities
|
| sk-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| sk-openoffice |
openoffice -- document disclosure
|
| skype |
skype -- multiple buffer overflow vulnerabilities
|
| sl-openoffice-SI |
openoffice -- DOC document heap overflow vulnerability
|
| sl-openoffice-SI |
openoffice -- document disclosure
|
| sl-openoffice-SL |
openoffice -- DOC document heap overflow vulnerability
|
| smtpproxy |
smtpproxy: remotely exploitable format string vulnerability
|
| snort |
snort -- Back Orifice preprocessor buffer overflow vulnerability
|
| socat |
socat -- format string vulnerability
|
| sox |
SoX buffer overflows when handling .WAV files
|
| sql-ledger |
sql-ledger -- multiple vulnerabilities
|
| squid |
squid -- FTP server response handling denial of service
|
| squid |
squid -- possible denial of service condition regarding NTLM authentication
|
| squid |
squid -- Denial Of Service Vulnerability in sslConnectTimeout
|
| squid |
squid -- Possible Denial Of Service Vulnerability in store.c
|
| squid |
squid -- denial-of-service vulnerabilities
|
| squid |
squid -- possible abuse of cachemgr.cgi
|
| squid |
squid -- DNS lookup spoofing vulnerability
|
| squid |
squid -- DoS on failed PUT/POST requests vulnerability
|
| squid |
squid -- correct handling of oversized HTTP reply headers
|
| squid |
squid -- buffer overflow in WCCP recvfrom() call
|
| squid |
squid -- possible cache-poisoning via malformed HTTP responses
|
| squid |
squid -- HTTP response splitting cache pollution attack
|
| squid |
squid -- no sanity check of usernames in squid_ldap_auth
|
| squid |
squid -- denial of service with forged WCCP messages
|
| squid |
squid -- buffer overflow vulnerability in gopherToHTML
|
| squid |
squid -- confusing results on empty acl declarations
|
| squid |
squid -- possible information disclosure
|
| squid |
squid -- SNMP module denial-of-service vulnerability
|
| squid |
squid -- NTLM authentication denial-of-service vulnerability
|
| squid |
Buffer overflow in Squid NTLM authentication helper
|
| squid |
squid ACL bypass due to URL decoding bug
|
| squid |
Squid NTLM authentication helper DoS
|
| squirrelmail |
squirrelmail -- random variable overwrite vulnerability
|
| squirrelmail |
squirrelmail -- plugin.php local file inclusion vulnerability
|
| squirrelmail |
squirrelmail -- multiple vulnerabilities
|
| squirrelmail |
squirrelmail -- _$POST variable handling allows for various attacks
|
| squirrelmail |
squirrelmail -- Several cross site scripting vulnerabilities
|
| squirrelmail |
squirrelmail -- XSS and remote code injection vulnerabilities
|
| squirrelmail |
squirrelmail -- cross site scripting vulnerability
|
| squirrelmail |
SquirrelMail XSS vulnerability
|
| sqwebmail |
Courier mail services: remotely exploitable buffer overflows
|
| sqwebmail |
Sqwebmail XSS vulnerability
|
| ssh2 |
SSH.COM SFTP server -- format string vulnerability
|
| ssh2-nox11 |
SSH.COM SFTP server -- format string vulnerability
|
| SSLtelnet |
Format string vulnerability in SSLtelnet
|
| SSLtelnet |
SSLtelnet remote format string vulnerability
|
| star |
Vulnerability in star versions that support ssh for remote tape access
|
| subversion |
subversion -- WebDAV fails to protect metadata
|
| subversion |
subversion date parsing vulnerability
|
| subversion |
mod_authz_svn access control bypass
|
| subversion-perl |
subversion -- WebDAV fails to protect metadata
|
| subversion-python |
subversion -- WebDAV fails to protect metadata
|
| subversion-{perl,python} |
mod_authz_svn access control bypass
|
| subversion{,-perl,-python} |
subversion: remote exploitable buffer overflow in 'svn://' parser
|
| sudo |
sudo -- arbitrary command execution
|
| sudo |
sudo -- local race condition vulnerability
|
| sudo |
sudo -- environmental variable CDPATH is not cleared
|
| sudo |
sudo -- privilege escalation with bash scripts
|
| sudo |
sudo -- sudoedit information disclosure
|
| sudoscript |
sudoscript -- signal delivery vulnerability
|
| sup |
sup -- format string vulnerability
|
| sup |
CMU SUP logging format string vulnerabilities
|
| super |
super format string vulnerability
|
| sylpheed |
sylpheed -- MIME-encoded file name buffer overflow vulnerability
|
| sylpheed |
sylpheed -- buffer overflow in header processing
|
| sylpheed-claws |
sylpheed -- MIME-encoded file name buffer overflow vulnerability
|
| sylpheed-claws |
sylpheed -- buffer overflow in header processing
|
| sylpheed-gtk2 |
sylpheed -- MIME-encoded file name buffer overflow vulnerability
|
| sylpheed-gtk2 |
sylpheed -- buffer overflow in header processing
|
| sympa |
sympa -- buffer overflow in "queue"
|
| sympa |
Sympa unauthorized list creation
|
| tcpdump |
tcpdump -- infinite loops in protocol decoding
|
| tcpdump |
tcpdump ISAKMP payload handling remote denial-of-service
|
| tcpdump |
L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump
|
| tdiary |
tdiary -- injection vulnerability
|
| tdiary |
tdiary -- cross site scripting vulnerability
|
| teTeX-base |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| teTeX-base |
xpdf -- buffer overflow vulnerability
|
| teTeX-base |
xpdf -- integer overflow vulnerabilities
|
| tethereal |
ethereal -- Multiple Protocol Dissector Vulnerabilities
|
| tethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal |
ethereal -- multiple vulnerabilities
|
| tethereal |
multiple vulnerabilities in ethereal
|
| tethereal |
multiple vulnerabilities in ethereal
|
| tethereal |
multiple vulnerabilities in ethereal
|
| tethereal-lite |
ethereal -- Multiple Protocol Dissector Vulnerabilities
|
| tethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal-lite |
ethereal -- multiple protocol dissectors vulnerabilities
|
| tethereal-lite |
ethereal -- multiple vulnerabilities
|
| tethereal-lite |
multiple vulnerabilities in ethereal
|
| tethereal-lite |
multiple vulnerabilities in ethereal
|
| tethereal{,-lite} |
multiple vulnerabilities in ethereal
|
| tethereal{,-lite} |
multiple vulnerabilities in ethereal
|
| thunderbird |
mozilla -- multiple vulnerabilities
|
| thunderbird |
mozilla -- multiple vulnerabilities
|
| thunderbird |
mozilla -- multiple vulnerabilities
|
| thunderbird |
thunderbird -- javascript execution
|
| thunderbird |
mozilla -- heap buffer overflow in GIF image processing
|
| thunderbird |
mozilla -- insecure permissions for some downloaded files
|
| thunderbird |
mozilla -- scripting vulnerabilities
|
| thunderbird |
mozilla -- users may be lured into bypassing security dialogs
|
| thunderbird |
mozilla -- hostname spoofing bug
|
| thunderbird |
mozilla -- BMP decoder vulnerabilities
|
| thunderbird |
mozilla -- vCard stack buffer overflow
|
| thunderbird |
mozilla -- multiple heap buffer overflows
|
| thunderbird |
mozilla -- POP client heap overflow
|
| thunderbird |
libpng stack-based buffer overflow and other code concerns
|
| thunderbird |
libpng stack-based buffer overflow and other code concerns
|
| tiff |
tiff -- buffer overflow vulnerability
|
| tiff |
tiff -- divide-by-zero denial-of-service
|
| tiff |
tiff -- tiffdump integer overflow vulnerability
|
| tiff |
tiff -- directory entry count integer overflow vulnerability
|
| tiff |
tiff -- multiple integer overflows
|
| tiff |
tiff -- RLE decoder heap overflows
|
| tikiwiki |
tikiwiki -- multiple vulnerabilities
|
| tin |
tin -- buffer overflow vulnerabilities
|
| tkdiff |
tkdiff -- temporary file symlink privilege escalation
|
| tla |
neon format string vulnerabilities
|
| tnftp |
tnftp -- mget does not check for directory escapes
|
| tnftpd |
tnftpd -- Remote root Exploit
|
| tnftpd |
tnftpd -- remotely exploitable vulnerability
|
| tor |
tor -- malicious tor server can locate a hidden service
|
| tor |
tor -- diffie-hellman handshake flaw
|
| tor |
tor -- information disclosure
|
| tor |
tor -- remote DoS and loss of anonymity
|
| torrentflux |
torrentflux -- User-Agent XSS Vulnerability
|
| tr-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| tr-openoffice |
openoffice -- document disclosure
|
| trac |
trac -- reStructuredText breach of privacy and denial of service vulnerability
|
| trac |
trac -- Wiki Macro Script Insertion Vulnerability
|
| trac |
trac -- search module SQL injection vulnerability
|
| trac |
trac -- file upload/download vulnerability
|
| turba |
turba -- Cross site scripting vulnerabilities in several of the address book name and contact data fields
|
| twiki |
twiki -- multiple file extensions file upload vulnerability
|
| twiki |
twiki -- arbitrary shell command execution
|
| uk-gd |
gd -- integer overflow
|
| unace |
unace -- multiple vulnerabilities
|
| unarj |
unarj -- long filename buffer overflow
|
| unarj |
unarj -- directory traversal vulnerability
|
| unrtf |
unrtf -- buffer overflow vulnerability
|
| unzip |
unzip -- permission race vulnerability
|
| unzoo |
unzoo -- Directory Traversal Vulnerability
|
| up-imapproxy |
up-imapproxy -- multiple vulnerabilities
|
| urban |
urban -- stack overflow vulnerabilities
|
| usermin |
webmin, usermin -- arbitrary file disclosure vulnerability
|
| usermin |
perl, webmin, usermin -- perl format string integer wrap vulnerability
|
| usermin |
Usermin remote shell command injection and insecure installation vulnerability
|
| uudeview |
uudeview buffer overflows
|
| uulib |
uudeview buffer overflows
|
| viewcvs |
viewcvs -- information leakage
|
| vim |
vim -- vulnerabilities in modeline handling: glob, expand
|
| vim |
vim -- vulnerabilities in modeline handling
|
| vim+ruby |
vim -- vulnerabilities in modeline handling: glob, expand
|
| vim+ruby |
vim -- vulnerabilities in modeline handling
|
| vim-lite |
vim -- vulnerabilities in modeline handling: glob, expand
|
| vim-lite |
vim -- vulnerabilities in modeline handling
|
| vnc |
vnc - authentication bypass vulnerability
|
| vpopmail |
vpopmail multiple vulnerabilities
|
| vpopmail-devel |
vpopmail multiple vulnerabilities
|
| vtiger |
vtiger -- multiple remote file inclusion vulnerabilities
|
| w3m |
w3m -- format string vulnerability
|
| w3m-img |
w3m -- format string vulnerability
|
| w3m-m17n |
w3m -- format string vulnerability
|
| w3m-m17n-img |
w3m -- format string vulnerability
|
| WebCalendar |
webcalendar -- information disclosure vulnerability
|
| WebCalendar |
WebCalendar -- unauthorized access vulnerability
|
| WebCalendar |
webcalendar -- remote file inclusion vulnerability
|
| webmin |
webmin, usermin -- arbitrary file disclosure vulnerability
|
| webmin |
perl, webmin, usermin -- perl format string integer wrap vulnerability
|
| webmin |
webmin -- insecure temporary file creation at installation time
|
| webmin |
Multiple vulnerabilities in Webmin
|
| weex |
weex -- remote format string vulnerability
|
| wget |
wget -- multiple vulnerabilities
|
| wget+ipv6 |
wget -- multiple vulnerabilities
|
| wget-devel |
wget -- multiple vulnerabilities
|
| wgetpro |
wget -- multiple vulnerabilities
|
| win32-codecs |
win32-codecs -- multiple vulnerabilities
|
| wine |
wine -- information disclosure due to insecure temporary file handling
|
| wordpress |
wordpress -- full path disclosure
|
| wordpress |
wordpress -- multiple vulnerabilities
|
| wordpress |
wordpress -- multiple vulnerabilities
|
| wordpress |
wordpress -- XSS in administration panel
|
| wu-ftpd |
wu-ftpd -- remote globbing DoS vulnerability
|
| wu-ftpd |
wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed
|
| wu-ftpd+ipv6 |
wu-ftpd -- remote globbing DoS vulnerability
|
| wu-ftpd+ipv6 |
wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed
|
| wv |
wv -- Multiple Integer Overflow Vulnerabilities
|
| wv |
wv library datetime field buffer overflow
|
| wv2 |
wv2 -- Integer Overflow Vulnerability
|
| wzdftpd |
wzdftpd -- remote DoS
|
| x11vnc |
x11vnc -- authentication bypass vulnerability
|
| xboing |
multiple buffer overflows in xboing
|
| xchat2 |
xchat remotely exploitable buffer overflow (Socks5)
|
| xdeview |
uudeview buffer overflows
|
| xemacs |
emacs -- movemail format string vulnerability
|
| xemacs-devel |
emacs -- movemail format string vulnerability
|
| xemacs-devel-21.5 |
emacs -- movemail format string vulnerability
|
| xemacs-devel-mule |
emacs -- movemail format string vulnerability
|
| xemacs-mule |
emacs -- movemail format string vulnerability
|
| xerces-c2 |
xerces-c2 -- Attribute blowup denial-of-service
|
| XFree86-libraries |
xpm -- image decoding vulnerabilities
|
| XFree86-Server |
X11 server -- pixmap allocation vulnerability
|
| XFree86-Server |
Buffer overflows in XFree86 servers
|
| xine |
xine -- multiple remote string vulnerabilities
|
| xine |
insecure temporary file creation in xine-check, xine-bugreport
|
| xli |
xloadimage -- buffer overflows in NIFF image title handling
|
| xli |
xli -- integer overflows in image size calculations
|
| xli |
xloadimage -- arbitrary command execution when handling compressed files
|
| xli |
xloadimage -- buffer overflow in FACES image handling
|
| xloadimage |
xloadimage -- buffer overflows in NIFF image title handling
|
| xloadimage |
xloadimage -- arbitrary command execution when handling compressed files
|
| xloadimage |
xloadimage -- buffer overflow in FACES image handling
|
| xorg-clients |
XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0
|
| xorg-libraries |
xpm -- image decoding vulnerabilities
|
| xorg-server |
xorg-server -- privilege escalation
|
| xorg-server |
X11 server -- pixmap allocation vulnerability
|
| xpdf |
xpdf -- disk fill DoS vulnerability
|
| xpdf |
xpdf -- makeFileKey2() buffer overflow vulnerability
|
| xpdf |
xpdf -- buffer overflow vulnerability
|
| xpdf |
xpdf -- integer overflow vulnerabilities
|
| xpm |
xpm -- image decoding vulnerabilities
|
| xshisen |
xshisen -- local buffer overflows
|
| xtrlock |
xtrlock -- X display locking bypass
|
| xv |
xv -- filename handling format string vulnerability
|
| xv |
xv -- exploitable buffer overflows
|
| xv-m17n |
xv -- exploitable buffer overflows
|
| xview |
xview -- multiple buffer overflows in xv_parse_one
|
| xzgv |
zgv, xzgv -- heap overflow vulnerability
|
| xzgv |
zgv -- exploitable heap overflows
|
| yamt |
yamt -- buffer overflow and directory traversal issues
|
| yamt |
yamt -- arbitrary command execution vulnerability
|
| zebra |
zebra/quagga denial of service vulnerability
|
| zgv |
zgv, xzgv -- heap overflow vulnerability
|
| zgv |
zgv -- exploitable heap overflows
|
| zh-cce |
CCE contains exploitable buffer overflows
|
| zh-chitex |
ChiTeX/ChiLaTeX unsafe set-user-id root
|
| zh-cle_base |
xpm -- image decoding vulnerabilities
|
| zh-emacs |
emacs -- movemail format string vulnerability
|
| zh-mutt-devel |
mutt -- Remote Buffer Overflow Vulnerability
|
| zh-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| zh-openoffice-CN |
openoffice -- DOC document heap overflow vulnerability
|
| zh-openoffice-CN |
openoffice -- document disclosure
|
| zh-openoffice-TW |
openoffice -- DOC document heap overflow vulnerability
|
| zh-openoffice-TW |
openoffice -- document disclosure
|
| zh-phpbb-tw |
phpbb -- NULL byte injection vulnerability
|
| zh-phpbb-tw |
phpbb -- multiple vulnerabilities
|
| zh-pine |
pine remotely exploitable buffer overflow in newmail.c
|
| zh-pine |
pine insecure URL handling
|
| zh-pine |
pine remote denial-of-service attack
|
| zh-pine |
pine remotely exploitable vulnerabilities
|
| zh-tin |
tin -- buffer overflow vulnerabilities
|
| zh-unzip |
unzip -- permission race vulnerability
|
| zh-xemacs |
emacs -- movemail format string vulnerability
|
| zh-xemacs-mule |
emacs -- movemail format string vulnerability
|
| zh-zhcon |
zhcon -- unauthorized file access
|
| zh_TW-openoffice |
openoffice -- DOC document heap overflow vulnerability
|
| zhCN-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| zhCN-linux-mozillafirebird |
firefox & mozilla -- command line URL shell command injection
|
| zhCN-linux-mozillafirebird |
firefox & mozilla -- buffer overflow vulnerability
|
| zhCN-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| zhCN-linux-mozillafirebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| zhCN-linux-mozillafirebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| zhCN-linux-mozillafirebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| zhCN-linux-mozillafirebird |
mozilla -- privilege escalation via DOM property overrides
|
| zhCN-linux-mozillafirebird |
mozilla -- code execution through javascript: favicons
|
| zhCN-linux-mozillafirebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| zhCN-linux-mozillafirebird |
mozilla -- heap buffer overflow in GIF image processing
|
| zhCN-linux-mozillafirebird |
mozilla -- insecure temporary directory vulnerability
|
| zhCN-linux-mozillafirebird |
mozilla -- arbitrary code execution vulnerability
|
| zhCN-linux-mozillafirebird |
web browsers -- window injection vulnerabilities
|
| zhCN-linux-mozillafirebird |
mozilla -- insecure permissions for some downloaded files
|
| zhCN-linux-mozillafirebird |
mozilla -- scripting vulnerabilities
|
| zhCN-linux-mozillafirebird |
mozilla -- users may be lured into bypassing security dialogs
|
| zhCN-linux-mozillafirebird |
mozilla -- hostname spoofing bug
|
| zhCN-linux-mozillafirebird |
mozilla -- BMP decoder vulnerabilities
|
| zhcon |
zhcon -- unauthorized file access
|
| zhTW-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| zhTW-linux-mozillafirebird |
firefox & mozilla -- command line URL shell command injection
|
| zhTW-linux-mozillafirebird |
firefox & mozilla -- buffer overflow vulnerability
|
| zhTW-linux-mozillafirebird |
firefox & mozilla -- multiple vulnerabilities
|
| zhTW-linux-mozillafirebird |
mozilla -- privilege escalation via non-DOM property overrides
|
| zhTW-linux-mozillafirebird |
mozilla -- "Wrapped" javascript: urls bypass security checks
|
| zhTW-linux-mozillafirebird |
mozilla -- code execution via javascript: IconURL vulnerability
|
| zhTW-linux-mozillafirebird |
mozilla -- privilege escalation via DOM property overrides
|
| zhTW-linux-mozillafirebird |
mozilla -- code execution through javascript: favicons
|
| zhTW-linux-mozillafirebird |
mozilla -- javascript "lambda" replace exposes memory contents
|
| zhTW-linux-mozillafirebird |
mozilla -- heap buffer overflow in GIF image processing
|
| zhTW-linux-mozillafirebird |
mozilla -- insecure temporary directory vulnerability
|
| zhTW-linux-mozillafirebird |
mozilla -- arbitrary code execution vulnerability
|
| zhTW-linux-mozillafirebird |
web browsers -- window injection vulnerabilities
|
| zhTW-linux-mozillafirebird |
mozilla -- insecure permissions for some downloaded files
|
| zhTW-linux-mozillafirebird |
mozilla -- scripting vulnerabilities
|
| zhTW-linux-mozillafirebird |
mozilla -- users may be lured into bypassing security dialogs
|
| zhTW-linux-mozillafirebird |
mozilla -- hostname spoofing bug
|
| zhTW-linux-mozillafirebird |
mozilla -- BMP decoder vulnerabilities
|
| zinf |
zinf -- potential buffer overflow playlist support
|
| zip |
zip -- long path buffer overflow
|
| zoo |
zoo -- stack based buffer overflow
|
| zope |
zope -- restructuredText "csv_table" Information Disclosure
|
| zope |
zope -- information disclosure vulnerability
|
| zope |
zope -- expose RestructuredText functionality to untrusted users
|
| zsync |
zlib -- buffer overflow vulnerability
|
| {,??-}aspell |
Buffer overflow in word-list-compress
|
| {,ja-}netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| {de-,fr-,pt_BR-}netscape7 |
libpng stack-based buffer overflow and other code concerns
|
| {ja,ko}-netscape-{communicator,navigator}-linux |
libpng stack-based buffer overflow and other code concerns
|
| {ja-,ru-,}gaim |
gaim remotely exploitable vulnerabilities in MSN component
|
| {ja-,ru-,}gaim |
multiple vulnerabilities in gaim
|
| {ja-,}bugzilla |
multiple vulnerabilities in Bugzilla
|
| {ja-,}phpgroupware |
phpGroupWare stores passwords in plain text
|
| {ja-,}phpgroupware |
phpGroupWare calendar and infolog SQL injection, calendar server side script execution
|
| {ja-,}phpgroupware |
XSS vulnerability in phpGroupWare wiki module
|
| {ja-,}samba |
samba printer change notification request DoS
|
| {ja-,}xv |
multiple buffer overflows in xv
|
| {linux-,}opera |
Opera "location" object write access vulnerability
|