Skip to contentDebian Linux vulnerabilities
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...CVE-2020-7106Fix available6.1 Medium
- redislabs hiredis, debian linux, fedoraproject fedora +2 moreasync.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference...CVE-2020-7105Fix available7.5 High
- wireshark, debian linux +1 moreIn Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan...CVE-2020-7045Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- oracle corporation java, debian linux, oracle jdk +2 more +4 moreVulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...CVE-2020-2655Public exploitFix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- schedmd slurm, debian linux, opensuse leap +2 moreSchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.CVE-2019-19728Fix available7.5 High
- pysaml2 project pysaml2, canonical ubuntu linux, debian linux +2 moreImproper Verification of Cryptographic Signature in PySAML2CVE-2020-5390Fix available7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +9 more +11 moreOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...CVE-2020-6851Fix available7.5 High
- debian linux, gnome gthumb, linuxmint pix +2 moregthumb - security updateCVE-2019-20326Public exploitFix available7.8 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 morePossible to send drafted messages as wrong agentCVE-2020-1767Fix available3.5 Low
- otrs, otrs ag ((otrs)) community edition, debian linux +2 moreImproper handling of uploaded inline imagesCVE-2020-1766Fix available2.0 Low
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreSpoofing of From field in several screensCVE-2020-1765Fix available3.5 Low
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to...CVE-2020-6377Fix available8.8 High
- ltsp ldm, debian linux +1 moreLTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have...CVE-2019-20373Fix available7.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 moreAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...CVE-2019-17023Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17022Fix available6.1 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreDue to a missing case handling object types, a type confusion vulnerability could occur,...CVE-2019-17017Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17016Fix available6.1 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 High
- google android, debian linux +1 moreIn calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a...CVE-2020-0009Public exploitFix available5.5 Medium
- phpmyadmin, debian linux, suse linux enterprise server +2 morephpMyAdmin SQL injection in user accounts pageCVE-2020-5504Public exploitFix availableEPSS 28.0%8.8 High
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based...CVE-2019-18625Fix available7.5 High
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature...CVE-2019-18792Fix available9.1 Critical
- debian linux, python pillow, canonical ubuntu linux +1 more +3 moreUncontrolled Resource Consumption in PillowCVE-2019-19911Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 moreDeserialization of Untrusted Data in jackson-databindCVE-2019-20330Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreBuffer Copy without Checking Size of Input in PillowCVE-2020-5311Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 morePCX P mode buffer overflow in PillowCVE-2020-5312Fix available9.8 Critical
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds Read in PillowCVE-2020-5313Fix available7.1 High
- openldap, debian linux +1 moreAn off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV...CVE-2014-8182Fix available7.5 High
- fusionforge, debian linux +1 moreFusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by...CVE-2014-62755.9 Medium
- sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...CVE-2019-20218Fix available7.5 High
- gpac, debian linux +1 moredimC_Read in isomedia/box_code_3gpp.c in GPAC 0.8.0 has a stack-based buffer overflow.CVE-2019-20208Fix available5.5 Medium
- otrs, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community...CVE-2019-18179Fix available3.5 Low
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreLogic issue EDK II may allow an unauthenticated user to potentially enable denial of service via...CVE-2019-14587Fix available6.5 Medium
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreUse after free vulnerability in EDK II may allow an authenticated user to potentially enable...CVE-2019-14586Fix available8.0 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreLogic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to...CVE-2019-14575Fix available7.8 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger truncation in EDK II may allow an authenticated user to potentially enable escalation of...CVE-2019-14563Fix available7.8 High
- intel bios, debian linux +1 moreInsufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core...CVE-2019-14558Fix available5.7 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based...CVE-2019-20161Fix available5.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based...CVE-2019-20162Fix available5.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-20163Fix available5.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL...CVE-2019-20165Fix available5.5 Medium
- Show moreLoading…