Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an...CVE-2020-6425Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10803Fix available5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerabilityCVE-2020-10802Fix available8.0 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreSquid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname)...CVE-2019-18860Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6428Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6427Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...CVE-2020-6426Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6424Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6422Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...CVE-2020-6449Fix available8.8 High
- rails actionview, debian linux, fedoraproject fedora +1 more +3 morePossible XSS vulnerability in ActionViewCVE-2020-5267Public exploitFix available4.0 Medium
- redhat libvirt, debian linux, fedoraproject fedora +2 moreqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...CVE-2019-20485Fix available5.7 Medium
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673Public exploitFix available8.8 High
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreIn GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read...CVE-2019-12921Fix available6.5 Medium
- kde okular, debian linux, fedoraproject fedora +2 moreKDE Okular before 1.10.0 allows code execution via an action link in a PDF document.CVE-2020-9359Fix available5.3 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 morelibvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and...CVE-2019-20788Fix available9.8 Critical
- golang go, debian linux, fedoraproject fedora +1 more +3 moreHelm uses crypto package vulnerable to panic from malformed X.509 certificateCVE-2020-7919Fix available7.5 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in AnsibleCVE-2020-1740Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 morePath Traversal in AnsibleCVE-2020-1735Fix available4.2 Medium
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1753Fix available5.0 Medium
- bluez, canonical ubuntu linux, debian linux +1 more +3 moreImproper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...CVE-2020-0556Fix available7.1 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...CVE-2020-10531Fix available8.8 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1739Fix available3.9 Low
- twisted, canonical ubuntu linux, debian linux +3 more +5 moreImproper Input Validation in TwistedCVE-2020-10108Fix available9.8 Critical
- twisted, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in TwistedCVE-2020-10109Fix available9.8 Critical
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733Fix available5.0 Medium
- dojo, debian linux, oracle communications application session controller +7 more +9 morePrototype pollution in dojoCVE-2020-5258Fix available7.7 High
- [red hat] networkmanager, debian linux +1 moreNetworkManager 0.9 and earlier allows local users to use other users' certificates or private...CVE-2012-1096Public exploit5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote...CVE-2020-6420Fix available8.8 High
- google android, debian linux +1 moreIn vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper...CVE-2020-0034Fix available7.5 High
- sleuthkit the sleuth kit, debian linux, fedoraproject fedora +2 moreIn version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow...CVE-2020-10232Fix available9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...CVE-2020-1752Fix available7.0 High
- netkit telnet project telnet, arista eos, debian linux +3 more +5 moreutility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary...CVE-2020-10188Fix availableEPSS 74.3%9.8 Critical
- usrsctp project usrsctp, canonical ubuntu linux, debian linux +2 moreusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.CVE-2019-20503Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...CVE-2019-20382Fix available3.5 Low
- envoyproxy envoy, redhat openshift service mesh, debian linux +2 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86597.5 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 moreSQL injection in DjangoCVE-2020-9402Fix availableEPSS 24.0%8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...CVE-2020-10018Fix available9.8 Critical
- pdfresurrect project pdfresurrect, debian linux +1 moreIn PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF...CVE-2020-9549Fix available7.8 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9547Public exploitFix availableEPSS 18.4%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9548Public exploitFix availableEPSS 18.9%9.8 Critical
- puma, ruby-lang ruby, debian linux +1 more +3 moreHTTP Response Splitting in PumaCVE-2020-5247Fix available6.5 Medium
- w1.fi hostapd, debian linux +1 morehostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library...CVE-2019-10064Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...CVE-2020-6386Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...CVE-2020-6384Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreType confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...CVE-2020-6383Fix available8.8 High
- Show moreLoading…