OP
Product
Openpkg
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 0Low 0
Watch
Add Openpkg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0772 | 9.8 | Oct 20 | Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code Affected: 2.0; 2.1 |
| CVE-2002-0083 | 9.8 | Mar 15 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges Affected: 1.0 |
| CVE-2004-0940 | 7.8 | Feb 9 | Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via… Affected: 2.0; 2.1; 2.2 |
| CVE-2007-5116 | – | Nov 7 | Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by… Affected: current |
| CVE-2004-0990 | – | Mar 1 | Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary… Affected: 2.1; 2.2; current |
| CVE-2004-0957 | – | Feb 9 | Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases… Affected: 2.1; 2.2; current |
| CVE-2004-0918 | – | Jan 27 | The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via… Affected: 2.1; 2.2; current |
| CVE-2004-1065 | – | Jan 10 | Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image… Affected: 2.1; 2.2; current |
| CVE-2004-1011 | – | Jan 10 | Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY… Affected: current |
| CVE-2004-1012 | – | Jan 10 | The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that… Affected: current |
| CVE-2004-1013 | – | Jan 10 | The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1)… Affected: current |
| CVE-2004-1019 | – | Jan 10 | The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the… Affected: 2.1; 2.2; current |
| CVE-2004-1471 | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… Affected: 1.3; 2.0; current |
| CVE-2004-0333 | – | Nov 23 | Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME… Affected: All versions, or not specified |
| CVE-2005-0373 | – | Oct 7 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows… Affected: 2.1; 2.2 |
| CVE-2004-0421 | – | Aug 18 | The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that… Affected: 1.3; 2.0 |
| CVE-2004-0413 | – | Aug 6 | libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of… Affected: 2.0 |
| CVE-2004-0414 | – | Aug 6 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial… Affected: 1.3; 2.0 |
| CVE-2004-0416 | – | Aug 6 | Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code Affected: 1.3; 2.0 |
| CVE-2004-0417 | – | Aug 6 | Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a… Affected: 1.3; 2.0 |
| CVE-2004-0418 | – | Aug 6 | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds"… Affected: 1.3; 2.0 |
| CVE-2004-0594 | – | Jul 27 | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to… Affected: 2.0; 2.1 |
| CVE-2004-1997 | – | May 5 | Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges Affected: 2.0 |
| CVE-2003-0615 | – | Aug 27 | Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter Affected: 1.2; 1.3; current |
| CVE-2003-0190 | – | May 12 | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine… Affected: 1.2; 1.3 |
| CVE-2003-0147 | – | Mar 31 | OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the… Affected: 1.1; 1.2 |
| CVE-2002-0985 | – | Sep 24 | Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g Affected: 1.1; 1.2 |
Showing 27