Skip to contentDebian Linux vulnerabilities
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated self-XSS via theme uploads in WordPressCVE-2020-4049Fix available2.4 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreset-screen-option filter misuse by plugins leading to privilege escalation in WordPressCVE-2020-4050Fix available3.5 Low
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS through embed block in WordPressCVE-2020-4046Fix available5.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 5.7.1. drivers/tty/vt/keyboard.c has an...CVE-2020-13974Fix available7.8 High
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. include...CVE-2020-13964Fix available6.1 Medium
- roundcube webmail, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS...CVE-2020-13965In KEVPublic exploitFix availableEPSS 76.6%6.1 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...CVE-2020-0198Public exploitFix available7.5 High
- google android, debian linux +1 moreIn exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing...CVE-2020-0182Fix available6.5 Medium
- videolan vlc media player, debian linux +1 moreA heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c...CVE-2020-13428Fix available7.8 High
- asus rt-n11, broadcom adsl, canon selphy cp1200 +214 more +216 moreThe Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the...CVE-2020-12695Public exploitFix availableEPSS 15.2%7.5 High
- debian linux, linuxtv xawtv, canonical ubuntu linux +3 more +5 moreAn issue was discovered in LinuxTV xawtv before 3.107. The function dev_open() in v4l-conf.c does...CVE-2020-13696Fix available4.4 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because...CVE-2020-13904Fix available5.5 Medium
- pam tacplus project tacplus, arista cloudvision portal, canonical ubuntu linux +1 more +3 moreIn support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog...CVE-2020-13881Fix available7.5 High
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- libupnp project libupnp, debian linux +1 morePortable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of...CVE-2020-13848Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 morerom_copy() in hw/core/loader.c in QEMU 4.1.0 does not validate the relationship between two...CVE-2020-13765Fix available5.6 Medium
- postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 moreImproper Restriction of XML External Entity ReferenceCVE-2020-13692Fix available7.7 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...CVE-2020-10757Public exploitFix available7.8 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- google chrome, debian linux +1 moreIncorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed...CVE-2020-6498Fix available6.5 Medium
- google chrome, debian linux +1 moreInsufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed...CVE-2020-6497Fix available6.5 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreUse after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote...CVE-2020-6496Fix available8.8 High
- google chrome, debian linux, opensuse backports +1 more +3 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed...CVE-2020-6495Fix available6.5 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreIncorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a...CVE-2020-6494Fix available6.5 Medium
- google chrome, debian linux, opensuse backports +1 more +3 moreUse after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote...CVE-2020-6493Fix available9.6 Critical
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreXSS in DjangoCVE-2020-13596Fix available6.1 Medium
- djangoproject django, canonical ubuntu linux, debian linux +4 more +6 moreData leakage via cache key collision in DjangoCVE-2020-13254Public exploitFix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and...CVE-2019-20811Fix available5.5 Medium
- nghttp2, debian linux, fedoraproject fedora +7 more +9 moreDenial of service in nghttp2CVE-2020-11080Fix available3.7 Low
- websocket-extensions project websocket-extensions, canonical ubuntu linux, debian linux +2 moreRegular Expression Denial of Service in websocket-extensions (RubyGem)CVE-2020-7663Fix available7.5 High
- docker engine, broadcom sannav, debian linux +1 more +3 moreImproper Input Validation in Docker EngineCVE-2020-13401Public exploitFix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 morehw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...CVE-2020-13754Fix available6.7 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...CVE-2020-13659Fix available2.5 Low
- sane-project sane backends, canonical ubuntu linux, debian linux +2 more +4 moreA NULL pointer dereference in sanei_epson_net_read in SANE Backends through 1.0.29 allows a...CVE-2020-12867Fix available5.5 Medium
- freerdp, debian linux, opensuse leap +2 moreOut-of-bound read in FreeRDPCVE-2020-11089Fix available3.7 Low
- freerdp, debian linux, opensuse leap +2 moreOut-of-bound read in FreeRDPCVE-2020-11088Fix available3.1 Low
- freerdp, debian linux, opensuse leap +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11087Fix available3.1 Low
- freerdp, debian linux, opensuse leap +2 moreOut-of-bounds Read in FreeRDP `ntlm_read_ntlm_v2_response`CVE-2020-11086Fix available3.1 Low
- freerdp, debian linux, opensuse leap +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11085Fix available2.6 Low
- freerdp, debian linux, opensuse leap +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11043Fix available2.2 Low
- freerdp, debian linux, opensuse leap +2 moreImproper Validation of Array Index in FreeRDPCVE-2020-11041Fix available2.2 Low
- freerdp, debian linux, opensuse leap +2 moreOut-of-bounds Read in FreeRDPCVE-2020-11040Fix available2.2 Low
- freerdp, debian linux, opensuse leap +2 moreInteger Overflow in FreeRDPCVE-2020-11039Fix available8.0 High
- freerdp, debian linux, opensuse leap +2 moreInteger Overflow to Buffer Overflow in FreeRDPCVE-2020-11038Fix available6.9 Medium
- freerdp, debian linux, opensuse leap +2 moreOut of bound read in update_recv in FreeRDPCVE-2020-11019Public exploitFix available4.3 Medium
- freerdp, debian linux, opensuse leap +2 moreOut of bound read in cliprdr_server_receive_capabilities in FreeRDPCVE-2020-11018Fix available6.5 Medium
- freerdp, debian linux, opensuse leap +2 moreDouble free in cliprdr_server_receive_capabilities in FreeRDPCVE-2020-11017Fix available6.5 Medium
- kaminari, debian linux +1 moreCross-Site Scripting in KaminariCVE-2020-11082Fix available6.4 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...CVE-2020-13362Fix available3.2 Low
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...CVE-2020-13361Fix available3.9 Low
- Show moreLoading…