Skip to contentDebian Linux vulnerabilities
- vim, apple mac os x, canonical ubuntu linux +4 more +6 moreIn Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS...CVE-2019-20807Fix available5.3 Medium
- sympa, canonical ubuntu linux, debian linux +1 more +3 moreSympa before 6.2.56 allows privilege escalation.CVE-2020-10936Fix available7.8 High
- phpmailer project phpmailer, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient output escaping of attachment names in PHPMailerCVE-2020-13625Fix available7.5 High
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 High
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moresd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of...CVE-2020-13253Fix available5.5 Medium
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreAbility to forge per-form CSRF tokens in RailsCVE-2020-8166Fix available4.3 Medium
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreCircumvention of file size limits in ActiveStorageCVE-2020-8162Public exploitFix available7.5 High
- rubyonrails rails, debian linux, opensuse backports sle +2 more +4 morePossible Strong Parameters Bypass in ActionPackCVE-2020-8164Fix available7.5 High
- rubyonrails rails, debian linux, opensuse leap +1 more +3 moreActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStoreCVE-2020-8165Public exploitFix availableEPSS 45.7%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +2 moreIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....CVE-2020-12829Fix available3.8 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS has shown timing differences when performing DSA signatures, which was exploitable and could...CVE-2020-12399Fix available4.4 Medium
- sqlite, apple icloud, ipados +15 more +17 moreSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.CVE-2020-13434Fix available5.5 Medium
- debian netqmail, canonical ubuntu linux, debian linux +2 moreqmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A...CVE-2020-3812Fix available5.5 Medium
- debian netqmail, canonical ubuntu linux, debian linux +2 moreqmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.CVE-2020-3811Fix available7.5 High
- puma, debian linux, fedoraproject fedora +1 more +3 moreHTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11077Fix available6.8 Medium
- puma, debian linux, fedoraproject fedora +2 moreHTTP Smuggling via Transfer-Encoding Header in PumaCVE-2020-11076Public exploitFix available7.5 High
- rack project rack, canonical ubuntu linux, debian linux +2 moreDirectory traversal in Rack::Directory app bundled with RackCVE-2020-8161Fix available8.6 High
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has...CVE-2020-13398Public exploitFix available8.3 High
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has...CVE-2020-13397Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has...CVE-2020-13396Fix available7.1 High
- schedmd slurm, debian linux, fedoraproject fedora +1 more +3 moreSlurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message...CVE-2020-12693Fix available8.1 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote...CVE-2020-13113Fix available8.2 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote...CVE-2020-13112Fix available9.1 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6491Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6490Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6489Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6488Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6487Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6486Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6485Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6484Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6483Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6482Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6481Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6480Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6479Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a...CVE-2020-6478Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an...CVE-2020-6476Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6475Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...CVE-2020-6474Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote...CVE-2020-6473Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6472Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6471Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61...CVE-2020-6470Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...CVE-2020-6469Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...CVE-2020-6468Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...CVE-2020-6467Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had...CVE-2020-6466Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote...CVE-2020-6465Fix available9.6 Critical
- Show moreLoading…