Skip to contentDebian Linux vulnerabilities
- mediawiki, debian linux, fedoraproject fedora +1 more +3 moreMediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of...CVE-2013-1816Fix available7.5 High
- weborf, debian linux +1 moreWeborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.CVE-2011-0529Fix available7.5 High
- smarty, smarty3, debian linux +2 moreSmarty3 Arbitrary PHP Code ExecutionCVE-2011-1028Fix available9.8 Critical
- redhat tuned, debian linux, fedoraproject fedora +4 more +6 moretuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill...CVE-2012-6136Fix available5.5 Medium
- ruby-lang ruby, debian linux, opensuse leap +1 more +3 moreRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the...CVE-2019-16255Fix available8.1 High
- ruby-lang ruby, debian linux +1 moreRuby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting....CVE-2019-16254Fix available5.3 Medium
- ruby-lang ruby, debian linux +1 moreWEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4...CVE-2019-16201Fix available7.5 High
- debian linux, fedoraproject fedora, foomatic-filters +2 morefoomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of...CVE-2011-2924Fix available5.5 Medium
- debian linux, foomatic-filters +1 morefoomatic-rip filter, all versions, used insecurely creates temporary files for storage of...CVE-2011-29235.5 Medium
- cookie-signature project cookie-signature, debian linux +1 morecookie-signature Timing AttackCVE-2016-1000236Fix available4.4 Medium
- nusoap, debian linux +1 morenuSOAP before 0.7.3-5 does not properly check the hostname of a cert.CVE-2012-6071Fix available7.5 High
- uzbl, debian linux +1 moreuzbl: Information disclosure via world-readable cookies storage fileCVE-2012-08435.5 Medium
- f5 nginx, debian linux +1 morenginx http proxy module does not verify peer identity of https origin server which could...CVE-2011-4968Fix available4.8 Medium
- suckless surf, debian linux +1 moresurf: cookie jar has read access from other local userCVE-2012-0842Fix available5.5 Medium
- gnu glibc, canonical ubuntu linux, debian linux +4 more +6 moreOn the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the...CVE-2019-19126Fix available3.3 Low
- redmine, debian linux +1 moreA SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine...CVE-2019-18890Public exploitFix available6.5 Medium
- fasterxml jackson-mapper-asl, apache spark, debian linux +2 more +4 moreImproper Restriction of XML External Entity Reference in jackson-mapper-aslCVE-2019-10172Public exploitFix availableEPSS 17.0%5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the...CVE-2019-19074Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu...CVE-2019-19068Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux...CVE-2019-19066Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel...CVE-2019-19062Fix available4.7 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 moreTwo memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell...CVE-2019-19057Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell...CVE-2019-19056Fix available4.7 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 moreA memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel...CVE-2019-19052Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill...CVE-2019-19051Fix available5.5 Medium
- oniguruma project oniguruma, debian linux, fedoraproject fedora +1 more +3 moreAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...CVE-2019-19012Public exploitFix availableEPSS 10.6%9.8 Critical
- ax25-tools, debian linux +1 moreThe AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a...CVE-2011-2910Fix available6.7 Medium
- drupal, debian linux, drupal core +2 more +4 moreAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the...CVE-2011-27267.5 High
- gksu-polkit, debian linux +1 moreIn gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may...CVE-2011-07039.8 Critical
- clamav, debian linux, fedoraproject fedora +2 moreClamAV before 0.97.7: dbg_printhex possible information leakCVE-2013-7089Fix available7.5 High
- clamav, debian linux, fedoraproject fedora +2 moreClamAV before 0.97.7 has buffer overflow in the libclamav componentCVE-2013-7088Fix available9.8 Critical
- clamav, debian linux, fedoraproject fedora +2 moreClamAV before 0.97.7 has WWPack corrupt heap memoryCVE-2013-7087Fix available9.8 Critical
- horms perdition, debian linux +1 morePerdition before 2.2 may have weak security when handling outbound connections, caused by an...CVE-2013-4584Fix available5.9 Medium
- cyrus imap, debian linux, fedoraproject fedora +2 moreCyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP...CVE-2019-18928Fix available9.8 Critical
- rack-cors project rack-cors, canonical ubuntu linux, debian linux +2 moreThe rack-cors rubygem may allow directory traveralCVE-2019-18978Fix available5.3 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management,...CVE-2019-18679Fix availableEPSS 43.1%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...CVE-2019-18678Fix available5.3 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation,...CVE-2019-18676Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap...CVE-2019-12526Fix availableEPSS 20.3%9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP...CVE-2019-12523Fix available9.1 Critical
- moodle, debian linux, fedoraproject fedora +1 more +3 moreMoodle has a database activity export permission issue where the export function of the database...CVE-2012-11557.5 High
- klibc, debian linux +1 moreIn klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not...CVE-2011-1930Public exploitFix availableEPSS 20.5%9.8 Critical
- thunar, debian linux, opensuse +2 moreThunar 1.2 through 1.2.1 could crash when copy and pasting a file name with % format characters...CVE-2011-15887.8 High
- rsyslog, debian linux, opensuse +2 moreA memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are...CVE-2011-1490Fix available5.5 Medium
- rsyslog, debian linux, opensuse +2 moreA memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were...CVE-2011-1489Fix available5.5 Medium
- rsyslog, debian linux, opensuse +2 moreA memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are...CVE-2011-1488Fix available5.5 Medium
- unixodbc, debian linux, opensuse +1 more +3 moreThe SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow...CVE-2011-1145Fix available7.8 High
- debian linux, tesseract-ocr tesseract ocr +1 moreIn tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID...CVE-2011-1136Fix available4.7 Medium
- v86d, debian linux +1 morev86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could...CVE-2011-1070Fix available7.8 High
- postgresql postgresql-common, canonical ubuntu linux, debian linux +2 moreThe pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges...CVE-2019-3466Fix available7.8 High
- Show moreLoading…