Skip to contentDebian Linux vulnerabilities
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid...CVE-2019-20170Fix available5.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There are memory...CVE-2019-20171Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker...CVE-2019-13767Fix availableEPSS 15.5%8.8 High
- openstack horizon, python-django-horizon, redhat openstack +2 more +4 moreThe file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS...CVE-2012-5474Fix available5.5 Medium
- debian linux, openstack horizon, openstack-dashboard +2 moreWithin the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum...CVE-2012-54765.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c...CVE-2019-20096Fix available5.5 Medium
- wordpress, debian linux +1 morewp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon...CVE-2019-20041Fix available9.8 Critical
- wordpress, debian linux +1 moreWordPress before 5.3.1 allowed an attacker to create a cross-site scripting attack (XSS) in well...CVE-2019-20042Fix available6.1 Medium
- wordpress, debian linux +1 moreWordPress before 5.3.1 allowed an unauthenticated user to make a post sticky through the REST API...CVE-2019-20043Fix available4.3 Medium
- gnome networkmanager, canonical ubuntu linux, debian linux +2 more +4 moreIn NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in...CVE-2012-2736Fix available4.4 Medium
- wordpress, debian linux +1 moreStored cross-site scripting (XSS) in WordPress block editorCVE-2019-16781Fix available5.8 Medium
- wordpress, debian linux +1 moreStored cross-site scripting (XSS) in WordPress block editorCVE-2019-16780Fix available5.8 Medium
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling in Waitress: Invalid whitespace characters in headersCVE-2019-16789Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreIn the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas...CVE-2019-19965Fix available4.7 Medium
- debian linux, linux kernel, netapp active iq unified manager +10 more +12 moreIn the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb...CVE-2019-19966Fix available4.6 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage...CVE-2019-19948Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and...CVE-2019-19950Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function...CVE-2019-19951Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...CVE-2019-19953Fix available9.1 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage...CVE-2019-19949Fix available9.1 Critical
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreIn the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB...CVE-2019-19947Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreAn exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3....CVE-2019-5108Fix availableEPSS 10.1%7.4 High
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache TomcatCVE-2019-12418Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, debian linux, fedoraproject fedora +1 more +3 moremail() may release string with refcount==1 twiceCVE-2019-110496.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreHeap-buffer-overflow READ in exifCVE-2019-11047Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18391Fix available5.5 Medium
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreAn out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in...CVE-2019-18390Fix available7.1 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18389Fix available7.8 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +2 moreA NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS...CVE-2019-18388Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 morekernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with...CVE-2019-19922Fix available5.5 Medium
- sa-exim project sa-exim, canonical ubuntu linux, debian linux +2 moresa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule....CVE-2019-19920Fix available8.8 High
- agendaless waitress, debian linux, oracle communications cloud native core network function cloud native environment +2 moreHTTP Request Smuggling: Content-Length Sent Twice in WaitressCVE-2019-16792Fix available7.1 High
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling: LF vs CRLF handling in WaitressCVE-2019-16785Fix available7.1 High
- agendaless waitress, debian linux, fedoraproject fedora +2 more +4 moreHTTP Request Smuggling: Invalid Transfer-Encoding in WaitressCVE-2019-16786Fix available7.1 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- gnome keyring, gnome-keyring, debian linux +2 moregnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync functionCVE-2012-6111Fix available7.5 High
- apple cups, debian linux +1 morecups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which...CVE-2012-60949.8 Critical
- apache openoffice, libreoffice, debian linux +1 more +3 moreLibreOffice and OpenOffice automatically open embedded contentCVE-2012-56396.5 Medium
- ecryptfs ecryptfs-utils, debian linux +1 moreecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which...CVE-2012-3409Fix available7.8 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- debian edu, debian-lan-config, skolelinux debian-edu-config +2 more +4 moreDebian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu,...CVE-2019-3467Fix available7.8 High
- Show moreLoading…