Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux +1 moreUse after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who...CVE-2020-6461Fix available9.6 Critical
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...CVE-2020-12653Fix available7.8 High
- roundcube webmail, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS)...CVE-2020-12625Public exploitFix available6.1 Medium
- roundcube webmail, debian linux +1 moreAn issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an...CVE-2020-12626Fix available6.5 Medium
- google chrome, debian linux +1 moreUse after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote...CVE-2020-6462Fix available9.6 Critical
- wordpress, debian linux +1 moreSpecially crafted filenames in WordPress leading to XSSCVE-2020-11026Fix available8.7 High
- wordpress, debian linux +1 moreUnauthenticated disclosure of certain private posts in WordPressCVE-2020-11028Fix available5.8 Medium
- wordpress, debian linux +1 moreCross-site scripting in stats method (object cache) in WordPressCVE-2020-11029Fix available5.8 Medium
- wordpress, debian linux +1 moreCross-site scripting (XSS) in Search block in WordPressCVE-2020-11030Fix available6.4 Medium
- wordpress, debian linux +1 moreAuthenticated cross-site scripting (XSS) in WordPress CustomizerCVE-2020-11025Fix available5.8 Medium
- wordpress, debian linux +1 morePassword reset links invalidation issue in WordPressCVE-2020-11027Public exploitFix availableEPSS 13.6%6.1 Medium
- saltstack salt, blackberry workspaces server, canonical ubuntu linux +3 more +5 moreSaltStack Salt is vulnerable Arbitrary Directory AccessCVE-2020-11652In KEVPublic exploitFix availableEPSS 86.4%6.5 Medium
- saltstack salt, canonical ubuntu linux, debian linux +2 more +4 moreSaltStack Salt Unauthenticated Remote Code ExecutionCVE-2020-11651In KEVPublic exploitFix availableEPSS 96.6%9.8 Critical
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 moreInformation disclosureCVE-2020-1774Fix available4.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 morecbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow...CVE-2020-12284Fix available9.8 Critical
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...CVE-2020-12243Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...CVE-2020-11884Fix available7.0 High
- red hat samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba...CVE-2020-10704Fix available7.5 High
- apache ats, traffic server, debian linux +2 moreApache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read...CVE-2020-9481Fix available7.5 High
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- openvpn, debian linux, fedoraproject fedora +2 moreAn issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ...CVE-2020-11810Fix available3.7 Low
- wisc htcondor, debian linux, fedoraproject fedora +2 moreHTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect...CVE-2019-18823Fix available9.8 Critical
- artifex jbig2dec, debian linux, opensuse leap +2 morejbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer...CVE-2020-12268Fix available9.8 Critical
- libgit2, debian linux +1 moreAn issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles...CVE-2020-12279Fix available9.8 Critical
- libgit2, debian linux +1 moreAn issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles...CVE-2020-12278Fix available9.8 Critical
- google chrome, debian linux +1 moreInsufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a...CVE-2020-6460Fix available6.5 Medium
- google chrome, debian linux +1 moreUse after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...CVE-2020-6459Fix available8.8 High
- google chrome, debian linux +1 moreOut of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote...CVE-2020-6458Fix available8.8 High
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...CVE-2020-12137Fix available6.1 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest...CVE-2020-11945Fix availableEPSS 27.2%9.8 Critical
- libslirp project libslirp, canonical ubuntu linux, debian linux +2 more +4 morelibslirp: use after free vulnerability cause a denial of service.CVE-2020-1983Fix available7.5 High
- teeworlds, canonical ubuntu linux, debian linux +3 more +5 moreCServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote...CVE-2020-12066Fix available7.5 High
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- php, debian linux, oracle communications diameter signaling router +1 more +3 moreOOB Read in urldecode()CVE-2020-7067Fix available7.5 High
- google chrome, debian linux +1 moreUse after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote...CVE-2020-6457Fix available9.6 Critical
- git, canonical ubuntu linux, debian linux +1 more +3 moreMalicious URLs can still cause Git to send a stored credential to the wrong serverCVE-2020-11008Fix available4.0 Medium
- ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block...CVE-2020-11868Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled,...CVE-2019-12519Fix available9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its...CVE-2019-12520Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...CVE-2019-12521Fix available5.9 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its...CVE-2019-12524Fix available9.8 Critical
- davical andrew\'s web libraries, debian linux +1 moreAn issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management...CVE-2020-11728Fix available7.5 High
- davical andrew\'s web libraries, debian linux +1 moreAn issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Long-term session...CVE-2020-11729Fix available9.8 Critical
- debian linux, fedoraproject fedora, oracle mysql connector\/j +1 more +3 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported...CVE-2020-2934Fix available5.0 Medium
- oracle corporation mysql connectors, debian linux, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported...CVE-2020-29332.2 Low
- oracle corporation mysql connectors, debian linux, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported...CVE-2020-28754.7 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2020-2830Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...CVE-2020-2816Fix available7.5 High
- Show moreLoading…