Debian

Debian Linux

9141 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2012-3515

  • EPSS 0.05%
  • Published 23.11.2012 20:55:03
  • Last modified 11.04.2025 00:51:21

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device mode...

9.3

CVE-2012-5829

Exploit
  • EPSS 6.84%
  • Published 21.11.2012 12:55:03
  • Last modified 11.04.2025 00:51:21

Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to exe...

9.3

CVE-2012-5842

  • EPSS 1.78%
  • Published 21.11.2012 12:55:03
  • Last modified 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a deni...

4.3

CVE-2012-4207

Exploit
  • EPSS 1.71%
  • Published 21.11.2012 12:55:02
  • Last modified 11.04.2025 00:51:21

The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a ~ (tilde) character in pro...

9.3

CVE-2012-4216

Exploit
  • EPSS 6.39%
  • Published 21.11.2012 12:55:02
  • Last modified 11.04.2025 00:51:21

Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to exe...

4.3

CVE-2012-4201

Exploit
  • EPSS 2.61%
  • Published 21.11.2012 12:55:01
  • Last modified 11.04.2025 00:51:21

The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 uses an incorrect context during the handling of JavaScript code...

4.3

CVE-2012-4533

  • EPSS 1.29%
  • Published 19.11.2012 00:55:00
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbit...

6.8

CVE-2012-4564

Exploit
  • EPSS 26.46%
  • Published 11.11.2012 13:00:58
  • Last modified 11.04.2025 00:51:21

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory...

3.5

CVE-2012-3197

  • EPSS 0.49%
  • Published 17.10.2012 00:55:02
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication.

9

CVE-2012-3163

  • EPSS 0.76%
  • Published 17.10.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Sc...