Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....CVE-2019-11815Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur...CVE-2019-11810Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...CVE-2018-20836Fix available8.1 High
- artifex ghostscript, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that in ghostscript some privileged operators remained accessible from various...CVE-2019-3839Fix available7.3 High
- dhcpcd project dhcpcd, debian linux +1 moredhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the...CVE-2019-11766Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108...CVE-2019-5823Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote...CVE-2019-5822Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5821Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5820Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108...CVE-2019-5819Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5818Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote...CVE-2019-5817Fix available8.8 High
- xmlsoft libxslt, debian linux, google chrome +2 moreNokogiri implementation of libxslt vulnerable to heap corruptionCVE-2019-5815Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote...CVE-2019-5814Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5813Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a...CVE-2019-5811Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5810Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker...CVE-2019-5809Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5808Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5807Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote...CVE-2019-5806Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to...CVE-2019-5805Fix available6.5 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0...CVE-2019-9892Fix available6.5 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11036Fix available4.8 Medium
- signing-party project signing-party, debian linux, opensuse leap +2 moregpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling...CVE-2019-11627Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreAn off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...CVE-2019-10131Fix available6.5 Medium
- filezilla, debian linux, fedoraproject fedora +1 more +3 moreUntrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a...CVE-2019-5429Fix available7.8 High
- dhcpcd project dhcpcd, debian linux +1 moredhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.CVE-2019-11579Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...CVE-2019-3900Fix available6.3 Medium
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11506Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11505Fix available8.8 High
- gstreamer, canonical ubuntu linux, debian linux +2 moreGStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a...CVE-2019-9928Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...CVE-2019-3882Fix available4.7 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a ...CVE-2019-11498Fix available6.5 Medium
- debian linux, linux kernel, netapp active iq +7 more +9 moreThe Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0...CVE-2019-11486Fix available7.0 High
- graphicsmagick, canonical ubuntu linux, debian linux +3 more +5 morecoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating...CVE-2019-11474Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant...CVE-2019-11487Fix available7.8 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- linux kernel, debian linux, netapp active iq unified manager for vmware vsphere +7 more +9 moreA race condition in perf_event_open() allows local attackers to leak sensitive data from setuid...CVE-2019-3901Fix available5.6 Medium
- mercurial, debian linux, redhat enterprise linux +2 moreMercurial Path Traversal/Link Following vulnerabilityCVE-2019-3902Fix available5.1 Medium
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...CVE-2019-11459Fix available5.5 Medium
- tildeslash monit, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflowCVE-2019-11455Fix available8.1 High
- mmonit monit, canonical ubuntu linux, debian linux +1 more +3 moreCross-site scriptingCVE-2019-11454Fix available6.1 Medium
- redhat libvirt, debian linux +1 morelibvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with...CVE-2016-10746Fix available7.5 High
- ffmpeg, canonical ubuntu linux, debian linux +1 more +3 morelibavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows...CVE-2019-11338Fix available8.8 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- Show moreLoading…