Debian

Debian Linux

9944 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2014-1508

Exploit
  • EPSS 0.99%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of...

9.8

CVE-2014-1510

Exploit
  • EPSS 71.09%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment t...

9.8

CVE-2014-1511

Exploit
  • EPSS 70.49%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.

10

CVE-2014-1512

Exploit
  • EPSS 12.93%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by trigge...

9.3

CVE-2014-1513

Exploit
  • EPSS 1.61%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to exec...

9.8

CVE-2014-1514

Exploit
  • EPSS 4.17%
  • Veröffentlicht 19.03.2014 10:55:06
  • Zuletzt bearbeitet 25.11.2025 17:50:16

vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to ex...

7.5

CVE-2014-1608

Exploit
  • EPSS 0.61%
  • Veröffentlicht 18.03.2014 17:03:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in a mc_issue_attachment_get SOAP request.

7.5

CVE-2014-1705

  • EPSS 3%
  • Veröffentlicht 16.03.2014 14:06:45
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

6.8

CVE-2013-6474

  • EPSS 20.77%
  • Veröffentlicht 14.03.2014 15:55:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.

6.8

CVE-2013-6475

  • EPSS 20.68%
  • Veröffentlicht 14.03.2014 15:55:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer...