Skip to contentDebian Linux vulnerabilities
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.CVE-2019-16392Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a...CVE-2019-16393Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password...CVE-2019-16394Public exploitFix available5.3 Medium
- infradead openconnect, canonical ubuntu linux, debian linux +2 more +4 moreprocess_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server...CVE-2019-16239Fix available9.8 Critical
- trusteddomain opendmarc, canonical ubuntu linux, debian linux +1 more +3 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass...CVE-2019-16378Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...CVE-2019-14835Fix available7.2 High
- gpac, debian linux +1 moreAVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a...CVE-2018-21015Fix available6.5 Medium
- gpac, debian linux +1 moreaudio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to...CVE-2018-21016Fix available6.5 Medium
- fasterxml jackson-databind, debian linux, fedoraproject fedora +14 more +16 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-16335Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +16 more +18 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540Public exploitFix availableEPSS 10.8%9.8 Critical
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite...CVE-2019-16319Fix available7.5 High
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morehostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection...CVE-2019-16275Fix available6.5 Medium
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of a carbons message in module/xep...CVE-2019-16235Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.CVE-2019-16236Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of an MAM message in module/xep...CVE-2019-16237Fix available7.5 High
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.CVE-2019-16217Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in shortcode previews.CVE-2019-16219Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows reflected XSS in the dashboard.CVE-2019-16221Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp...CVE-2019-16222Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in post previews by authenticated users.CVE-2019-16223Public exploitFix available5.4 Medium
- wordpress, debian linux +1 moreIn WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp...CVE-2019-16220Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.3 allows XSS in stored comments.CVE-2019-16218Fix available6.1 Medium
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481Fix available9.8 Critical
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- oniguruma project oniguruma, canonical ubuntu linux, debian linux +1 more +3 moreOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.CVE-2019-16163Fix available7.5 High
- nic bird, debian linux, fedoraproject fedora +1 more +3 moreBIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer...CVE-2019-16159Fix available7.5 High
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 more +4 moresysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in...CVE-2019-16167Fix available5.5 Medium
- imapfilter project imapfilter, debian linux, fedoraproject fedora +2 more +4 moreIMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.CVE-2016-10937Fix available7.5 High
- google android, canonical ubuntu linux, debian linux +2 moreIn the Android kernel in F2FS driver there is a possible out of bounds read due to a missing...CVE-2019-9445Fix available4.4 Medium
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...CVE-2019-16056Fix available7.5 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +3 more +5 moreUnsafe URL assembly flaw in allowed script location checkCVE-2019-9854Fix available7.8 High
- exim, debian linux +1 moreExim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing...CVE-2019-15846Public exploitFix availableEPSS 35.7%9.8 Critical
- opensc project opensc, debian linux, fedoraproject fedora +2 moreOpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in...CVE-2019-15946Fix available6.4 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreOpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string...CVE-2019-15945Fix available6.4 Medium
- opencv, debian linux, opensuse leap +2 moreDivide By Zero in OpenCV.CVE-2019-15939Fix available5.9 Medium
- uclouvain openjpeg, debian linux +1 moreOpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.CVE-2018-21010Fix available8.8 High
- debian linux, linux kernel, opensuse leap +2 moreAn issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when...CVE-2019-15917Fix available7.0 High
- debian linux, linux kernel, netapp active iq performance analytics services +3 more +5 moreA backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9...CVE-2019-15902Fix available5.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the...CVE-2019-15926Fix available9.1 Critical
- varnish-software varnish cache, varnish cache project cache, debian linux +2 moreAn issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An...CVE-2019-15892Fix available7.5 High
- red hat ansible, debian linux, opensuse backports sle +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-10206Fix available6.4 Medium
- samba, canonical ubuntu linux, debian linux +2 moreA flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x...CVE-2019-10197Fix available6.5 Medium
- freetype, canonical ubuntu linux, debian linux +2 moreFreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.CVE-2015-9383Fix available6.5 Medium
- freetype, debian linux +1 moreFreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because...CVE-2015-9382Fix available6.5 Medium
- freetype, debian linux +1 moreFreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.CVE-2015-9381Fix available8.8 High
- gosa project gosa, debian linux +1 moreThe GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection,...CVE-2019-14466Fix available6.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreIn the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c...CVE-2019-15807Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +36 more +38 moreThere is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell...CVE-2019-14816Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreThere is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the...CVE-2019-14814Fix available5.5 Medium
- Show moreLoading…