Skip to contentDebian Linux vulnerabilities
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash....CVE-2020-9428Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could...CVE-2020-9430Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could...CVE-2020-9431Fix available7.5 High
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063Fix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- pureftpd pure-ftpd, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been...CVE-2020-9274Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreType confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to...CVE-2020-6418In KEVPublic exploitFix availableEPSS 78.8%8.8 High
- opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moreOpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in...CVE-2020-8794Public exploitFix availableEPSS 88.9%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c...CVE-2020-9383Fix available7.1 High
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- sympa, debian linux, fedoraproject fedora +2 moreSympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk...CVE-2020-9369Fix available7.5 High
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in RakeCVE-2020-8130Fix available6.4 Medium
- zsh, apple ipados, iphone os +5 more +7 moreIn Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no...CVE-2019-20044Fix available7.8 High
- networkmanager-ssh project networkmanager-ssh, debian linux +1 moredanfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options...CVE-2020-9355Fix available9.8 Critical
- cacti, debian linux, fedoraproject fedora +2 more +4 moregraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...CVE-2020-8813Public exploitFix availableEPSS 73.9%8.8 High
- debian x11-common, linux +1 moreThe init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink...CVE-2012-1093Fix available7.8 High
- netsurf, debian linux +1 moreInformation-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.CVE-2012-0844Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 morefs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke...CVE-2011-4915Fix available5.5 Medium
- proftpd, debian linux, fedoraproject fedora +4 more +6 moreIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer...CVE-2020-9273Public exploitFix availableEPSS 11.8%8.8 High
- debian linux, golang package ssh +1 moreImproper Verification of Cryptographic Signature in golang.org/x/cryptoCVE-2020-9283Public exploitFix availableEPSS 21.1%7.5 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +1 more +3 moreA flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs...CVE-2019-20479Fix available6.1 Medium
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6061Fix available7.0 High
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses...CVE-2020-6062Fix available5.9 Medium
- o-dyn collabtive, canonical ubuntu linux, debian linux +2 moreMultiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser...CVE-2015-0258Fix available8.8 High
- horde groupware, debian linux, fedoraproject fedora +2 moreHorde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data,...CVE-2020-8518Public exploitFix availableEPSS 71.7%9.8 Critical
- ruby-lang ruby, debian linux +1 moreAn exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function...CVE-2016-2338Public exploitFix available9.8 Critical
- dojo dojox, debian linux +1 moreXSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncodeCVE-2019-10785Fix available6.1 Medium
- weechat, debian linux, fedoraproject fedora +2 more +4 moreirc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers...CVE-2020-8955Fix available9.8 Critical
- zenoss core, debian linux +1 moreMultiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core...CVE-2014-6262Fix available7.5 High
- qemu, debian linux, opensuse leap +2 more +4 moreAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...CVE-2020-1711Fix available7.7 High
- htmlunit, apache camel, canonical ubuntu linux +1 more +3 moreCode execution vulnerability in HtmlUnitCVE-2020-5529Fix available8.1 High
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...CVE-2018-14553Fix available7.5 High
- fasterxml jackson-databind, debian linux, huawei oceanstor 9000 firmware +5 more +7 moreDeserialization of Untrusted Data in jackson-databindCVE-2020-8840Public exploitFix availableEPSS 26.6%9.8 Critical
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6416Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6415Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6408Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6406Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6404Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a...CVE-2020-6403Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87...CVE-2020-6402Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6400Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreUse of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6398Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6397Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6396Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6394Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6393Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an...CVE-2020-6392Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87...CVE-2020-6391Fix available4.3 Medium
- Show moreLoading…