Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +2 morertl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6...CVE-2019-17666Public exploitFix available8.8 High
- wordpress, debian linux +1 moreWordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows...CVE-2019-17670Fix available9.8 Critical
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions...CVE-2019-2999Fix available4.7 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2992Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2988Fix available3.7 Low
- oracle corporation java, debian linux, netapp e-series santricity os controller +10 more +12 moreVulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that...CVE-2019-2987Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2019-2983Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2019-2981Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2019-2978Fix available3.7 Low
- oracle corporation java, debian linux, netapp active iq unified manager +8 more +10 moreVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions...CVE-2019-2977Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)....CVE-2019-2975Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2019-2973Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2019-2964Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2962Fix available3.7 Low
- oracle corporation java, debian linux, netapp e-series santricity os controller +8 more +10 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2019-2958Fix available5.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos)....CVE-2019-2949Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2019-2945Fix available3.1 Low
- oracle corporation java, debian linux, mcafee epolicy orchestrator +3 more +5 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2019-2933Fix available3.1 Low
- oracle corporation java, canonical ubuntu linux, debian linux +4 more +6 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2019-2894Fix available3.7 Low
- pivotal rabbitmq, rabbitmq for pcf, debian linux +3 more +5 moreRabbitMQ XSS attackCVE-2019-11281Fix available2.4 Low
- haml, debian linux +1 moreHaml vulnerable to cross-site scriptingCVE-2017-1002201Fix available6.1 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreIn FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and...CVE-2019-17539Fix available9.8 Critical
- imagemagick, debian linux +1 moreImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.CVE-2019-17540Fix available8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array...CVE-2019-17542Fix available9.8 Critical
- osgeo gdal, debian linux, fedoraproject fedora +3 more +5 moreGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the...CVE-2019-17545Fix available9.8 Critical
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- matio project matio, debian linux +1 moreMat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap...CVE-2019-17533Fix available8.2 High
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +19 more +21 morejackson-databind polymorphic typing issueCVE-2019-17531Fix available9.8 Critical
- android kernel, debian linux, google android +75 more +77 moreA use-after-free in binder.c allows an elevation of privilege from an application to the Linux...CVE-2019-2215In KEVPublic exploitFix availableEPSS 72.1%7.8 High
- nongnu libntlm, canonical ubuntu linux, debian linux +3 more +5 moreLibntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...CVE-2019-17455Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from...CVE-2019-17402Fix available6.5 Medium
- libtom libtomcrypt, debian linux +1 moreIn LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c)...CVE-2019-17362Fix available9.1 Critical
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose CredentialsCVE-2019-14846Fix available7.3 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of...CVE-2019-17340Fix available8.8 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17344Fix available6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a...CVE-2019-17345Fix available6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17346Fix available8.8 High
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17347Fix available7.8 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17348Fix available6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...CVE-2019-17349Fix available5.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...CVE-2019-17350Fix available5.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17343Fix available6.8 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17342Fix available7.0 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-17341Fix available7.8 High
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap...CVE-2019-17042Fix available9.8 Critical
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has...CVE-2019-17041Public exploitFix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +9 more +11 moreImproper Input Validation in jackson-databindCVE-2019-17267Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not...CVE-2019-17133Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 morejackson-databind polymorphic typing issueCVE-2019-16943Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 morePolymorphic Typing in FasterXML jackson-databindCVE-2019-16942Fix available9.8 Critical
- Show moreLoading…