Skip to contentDebian Linux vulnerabilities
- debian linux, gnome display manager, opensuse leap +1 more +3 moregdm3 3.14.2 and possibly later has an information leak before screen lockCVE-2016-10000022.4 Low
- debian shadow, red hat sudo, debian linux +1 more +3 moreThere is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -...CVE-2005-4890Fix available7.8 High
- debian linux, linux kernel, broadcom fabric operating system +15 more +17 moreAn issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is...CVE-2019-18683Public exploitFix available7.0 High
- berlios slim, debian linux +1 moreslim has NULL pointer dereference when using crypt() method from glibc 2.17CVE-2013-4412Fix available7.5 High
- mutt, debian linux +1 moreMutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of...CVE-2005-2351Fix available5.5 Medium
- openstack compute, keystone, redhat openstack +1 more +3 moreOpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255Fix available5.9 Medium
- glpi-project glpi, debian linux +1 moreGLPI 0.83.7 has Local File Inclusion in common.tabs.php.CVE-2013-2227Public exploitEPSS 13.0%7.5 High
- gnome evince, debian linux, opensuse +1 more +3 moreevince is missing a check on number of pages which can lead to a segmentation faultCVE-2013-3718Fix available5.5 Medium
- debian linux, readymedia project readymedia +1 moreMiniDLNA has heap-based buffer overflowCVE-2013-2739Public exploitFix available9.8 Critical
- miniupnp project miniupnpd, debian linux +1 moreMiniUPnPd has information disclosure use of snprintf()CVE-2013-2600Fix available7.5 High
- call-cc chicken, debian linux +1 moreChicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an...CVE-2012-6123Fix available6.5 Medium
- call-cc chicken, debian linux +1 moreOS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken...CVE-2013-2024Fix available8.8 High
- autojump, debian linux +1 moreautojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install...CVE-2013-20127.3 High
- ikimedia foundation mediawiki, debian linux +1 moreA cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4...CVE-2013-1951Fix available6.1 Medium
- baseurl yum, debian linux +1 moreyum does not properly handle bad metadata, which allows an attacker to cause a denial of service...CVE-2013-19109.8 Critical
- python-docutils project python-docutils, debian linux +1 morepython-docutils allows insecure usage of temporary filesCVE-2009-5042Fix available9.1 Critical
- burn project burn, debian linux +1 moreburn allows file names to escape via mishandled quotation marksCVE-2009-50439.8 Critical
- mumble, debian linux +1 moreMumble: murmur-server has DoS due to malformed client queryCVE-2010-2490Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS...CVE-2019-18425Fix available9.8 Critical
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via...CVE-2019-18424Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...CVE-2019-18423Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS...CVE-2019-18421Fix available7.5 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of...CVE-2019-18420Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...CVE-2019-18422Fix available8.8 High
- transmission, debian linux +1 moreTransmission before 1.92 allows attackers to prevent download of a file by corrupted data during...CVE-2010-0749Fix available5.3 Medium
- transmission, debian linux +1 moreTransmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have...CVE-2010-0748Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in...CVE-2019-10220Public exploitFix available8.0 High
- ikiwiki, debian linux +1 moreikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.CVE-2011-1408Fix available8.2 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in...CVE-2019-15681Fix available7.5 High
- openafs, debian linux +1 moreOpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability...CVE-2019-18602Fix available7.5 High
- openafs, debian linux +1 moreOpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error...CVE-2019-18603Fix available5.9 Medium
- gpw, debian linux +1 moregpw generates shorter passwords than requiredCVE-2011-49317.5 High
- asterisk, debian linux +1 moreasterisk allows calls on prohibited networksCVE-2009-3723Fix available7.5 High
- grsecurity paxtest, debian linux +1 morepaxtest handles temporary files insecurelyCVE-2010-3373Fix available5.5 Medium
- python keyring, python keyring lib keyring lib, debian linux +2 moreIncorrect Default Permissions in keyringCVE-2012-5577Fix available7.5 High
- golang go, arista cloudvision portal, eos +8 more +10 moreGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...CVE-2019-17596Public exploitFix available7.5 High
- libarchive, canonical ubuntu linux, debian linux +2 morearchive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0...CVE-2019-18408Fix available7.5 High
- qemu, debian linux, fedoraproject fedora +2 more +4 moreThe ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service ...CVE-2019-120676.5 Medium
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- qt qtbase, debian linux +1 moreAn out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt...CVE-2019-18281Fix available4.3 Medium
- loofah project loofah, canonical ubuntu linux, debian linux +1 more +3 moreLoofah Allows Cross-site ScriptingCVE-2019-15587Fix available5.4 Medium
- file project file, canonical ubuntu linux, debian linux +3 more +5 morecdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR...CVE-2019-18218Fix available7.8 High
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- xmlsoft libxslt, canonical ubuntu linux, debian linux +2 moreNokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerabilityCVE-2019-18197Fix available7.5 High
- wordpress, debian linux +1 moreIn WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the...CVE-2019-17671Public exploitFix availableEPSS 36.5%5.3 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE...CVE-2019-17672Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because...CVE-2019-17673Fix available7.5 High
- wordpress, debian linux +1 moreWordPress before 5.2.4 does not properly consider type confusion during validation of the referer...CVE-2019-17675Fix available8.8 High
- wordpress, debian linux +1 moreWordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.CVE-2019-17674Fix available5.4 Medium
- wordpress, debian linux +1 moreWordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL...CVE-2019-17669Fix available9.8 Critical
- Show moreLoading…