All versions of 9.x and later are vul† † † ) †žY'€''input data. (CVE-2018-1303)
core: Possible crash with excessively long HTTP request headers. Impractical to exploit with a production build and productiŒÀ † † ) †žY'€''p>
CVE-2018-5102: Use-after-free in HTML media elements
CVE-2018-5122: Potential intege’à † † ) †žY'€''ue#1066: CVE-2017-16660 in remote_agent.php logging function
issue#1066: CVE-2017-16661 in view log file
issue#1071: CVE-2017-16785 in global_s™€ † † f †žY' B…â€eezip developers report:
libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
idn: Solve out-of-boundÄà † † S †žY' U„”}€RRcvename>CVE-2016-3659
http://www.cacti.net/release_notes_0_8_Ë€ † † U †žY' S“ €TTArun Suresh reports: 2015-07-11xen-kernel -- Information leak through version informöà † † ` †žY'º H†™:¥_it;a=commitdiff;h=fac6f744d8170585f05e098ce9c9f27eeffa818e75b0cfcf105c8720a47a2ee80a70ba16799d7ý€ † † T †žY' T„Ó?€SS0778 https://www.suse.com/security/cve/CVE-2015-0778.htmlmutt
This potentially allows a malicious application to pose as another for authentication purposes when executing privileged actions.
MFSA 2013-48 Memory corruption found using Address Sanitizer¢À † † ) †žY'€''
Jonas Obrist reports: The security issue allows users with limited admin access to elevate their privileges through XSS injection using the page_attri¨à † † ) †žY'€''a reports:
A vulnerability has been discovered in OpenX, which can be exploited by malicious ¯€ † † ) †žY'€''
typo3 4.5 4.5.17 4.6 4.6.10 4.7 4.7.2
KDE Security Advisory reports:
An unauthenticÎ † † 0 †žY' xÒ¯/14.html">
Critical vulnerabilities have bÔÀ † † ) †žY'€''a.org/security/3.4.3/">
When a bug is in a group, none of its information (other than its status and resolution) should be visible to users outside thaÚà † † ) †žY'€''>
http://www.securityfocus.com/archive/1/498746/30/0/threaded http://securityreason.com/achievement_securityalert/58 2008-04-23 2008-04-24 óà † † 2 †žY'¬ v…?…1age>gftp 2.0.18_6Gentoú€ † † ) †žY'€'' storing them in a fixed-size array. A malicious entry in the database could trigger a stack overflow in the program, leading to arbitrary code execution wit‚€ † † L †žY'€K \‚’@K/topic> gtar 1.16_2‚†À † † : †žY'¹ n…• 9ts> 2005-07-27 gnupg 1.4.5‚Œà † † b †žY'½ F…í;¤a a buffer overflow which could allow remote code execution90 CVE-2006-085‚“€ † † h †žY'¥ @Ï@€Bgtopic>trac -- search module SQL injectrac 0.9.2
Tavis Ormandy discovered several integer overflows in xli's
image size handling. A maliciously crafted image may be able
to cause a heap buffer ov‚¥à † †
) †žY'€''ery>2005-02-28
Secunia has provided a demonstration of the vulnerability at