Skip to contentDebian Linux vulnerabilities
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a...CVE-2020-15306Fix available5.5 Medium
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds reads in PillowCVE-2020-10177Fix available5.5 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreimg_auth.php may leak private extension images into the public cacheCVE-2020-15005Fix available3.1 Low
- apache traffic server, debian linux +1 moreApache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to...CVE-2020-9494Fix available7.5 High
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12862Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12863Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreA heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12865Fix available8.0 High
- gnu mailman, canonical ubuntu linux, debian linux +2 moreGNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private...CVE-2020-15011Fix available4.3 Medium
- haxx curl, debian linux, fujitsu m10-1 firmware +10 more +12 morecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...CVE-2020-8177Fix available7.8 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +5 more +7 morecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...CVE-2020-8169Fix available7.5 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDPCVE-2020-11098Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDPCVE-2020-11097Public exploitFix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPCVE-2020-11096Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDPCVE-2020-11095Fix available3.5 Low
- alpine project alpine, debian linux, fedoraproject fedora +2 moreAlpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in...CVE-2020-14929Fix available7.5 High
- rubyonrails rails, debian linux +1 moreCSRF Vulnerability in rails-ujsCVE-2020-8167Fix available6.5 Medium
- rack project rack, canonical ubuntu linux, debian linux +2 moreRack allows Percent-encoded cookies to overwrite existing prefixed cookie namesCVE-2020-8184Fix available7.5 High
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...CVE-2020-14954Fix available5.9 Medium
- mozilla firefox, debian linux, fedoraproject fedora +1 more +3 moreDuring RSA key generation, bignum implementations used a variation of the Binary Extended...CVE-2020-12402Fix available4.4 Medium
- cisofy lynis, debian linux, fedoraproject fedora +2 moreIn CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list...CVE-2019-13033Fix available3.3 Low
- cisco amp for endpoints, clam antivirus, canonical ubuntu linux +3 more +5 moreCisco AMP for Endpoints and ClamAV Privilege Escalation VulnerabilityCVE-2020-3350Fix available5.5 Medium
- debian linux, linux kernel +1 moreA flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with...CVE-2020-10781Fix available5.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL...CVE-2020-14396Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL...CVE-2020-14397Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes...CVE-2020-14398Fix available7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14399Fix availableDisputed7.5 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through...CVE-2020-14400Fix availableDisputed7.5 High
- libvncserver project libvncserver, debian linux, opensuse leap +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value...CVE-2020-14401Fix available6.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds...CVE-2020-14402Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of...CVE-2020-14403Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds...CVE-2020-14404Fix available5.4 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit...CVE-2020-14405Fix available6.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 morelibvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket...CVE-2019-20839Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a...CVE-2019-20840Fix available7.5 High
- isc bind, bind9, canonical ubuntu linux +4 more +6 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8619Fix available4.9 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14195Public exploitFix available8.1 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context...CVE-2020-14147Fix available7.7 High
- barton ngircd, debian linux, fedoraproject fedora +2 moreThe Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access,...CVE-2020-14148Fix available7.5 High
- ijg libjpeg, debian linux +1 moreIn IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor...CVE-2020-14152Fix available7.1 High
- mutt, canonical ubuntu linux, debian linux +1 more +3 moreMutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.CVE-2020-14093Fix available5.9 Medium
- dojo dijit, debian linux, netapp active iq unified manager +3 more +5 moreXSS in Dijit Editor's LinkDialog pluginCVE-2020-4051Fix available3.7 Low
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14061Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14062Fix available8.1 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated XSS via media attachment page in WordPressCVE-2020-4047Fix available6.8 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreOpen redirect in wp_validate_redirect() in WordPressCVE-2020-4048Fix available5.7 Medium
- Show moreLoading…