Skip to contentDebian Linux vulnerabilities
- google chrome, apple ipados, iphone os +8 more +10 moreInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...CVE-2020-6514Public exploitFix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6513Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...CVE-2020-6512Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a...CVE-2020-6511Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6510Fix available7.8 High
- golang go, cloudfoundry cf-deployment, routing-release +3 more +5 moreGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...CVE-2020-15586Fix available5.9 Medium
- kramdown project kramdown, canonical ubuntu linux, debian linux +1 more +3 moreUnintended read access in kramdown gemCVE-2020-14001Fix available9.8 Critical
- zabbix, debian linux, fedoraproject fedora +2 more +4 moreZabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x...CVE-2020-15803Fix availableEPSS 32.3%6.1 Medium
- eclipse web tools platform, the eclipse foundation eclipse web tools platform, debian linux +2 moreIn all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files...CVE-2019-17637Fix available7.1 High
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache TomcatCVE-2020-13935Public exploitFix availableEPSS 86.6%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934Fix availableEPSS 64.1%7.5 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2020-14621Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14593Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14583Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2020-14581Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14579Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +19 more +21 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14578Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)....CVE-2020-14577Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions...CVE-2020-14573Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions...CVE-2020-14562Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14556Fix available4.8 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreThe bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block...CVE-2020-13753Fix available10.0 Critical
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- bareos, bareos gmbh & co. kg director, debian linux +2 moreHeap-based Buffer Overflow in Bareos DirectorCVE-2020-11061Fix available6.0 Medium
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security updateCVE-2020-10756Fix available6.5 Medium
- gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 moreevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...CVE-2020-14928Fix available5.9 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges...CVE-2020-15567Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor...CVE-2020-15564Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a...CVE-2020-15565Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a...CVE-2020-15563Fix available6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash...CVE-2020-15566Fix available6.5 Medium
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...CVE-2020-14303Fix available7.5 High
- milkytracker project milkytracker, debian linux +1 morePlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric...CVE-2020-15569Fix available5.5 Medium
- roundcube webmail, debian linux +1 moreAn issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before...CVE-2020-15562Fix available6.1 Medium
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...CVE-2020-15466Fix available7.5 High
- qemu, debian linux +1 moreIn QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL...CVE-2020-15469Fix available2.3 Low
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreRemote code execution via user-provided local names in ActionViewCVE-2020-8163Public exploitFix availableEPSS 82.5%8.8 High
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via...CVE-2020-9498Fix available6.7 Medium
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via...CVE-2020-9497Fix available4.4 Medium
- libraw, debian linux, fedoraproject fedora +2 moreLibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp...CVE-2020-15503Fix available7.5 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...CVE-2020-10745Fix available7.5 High
- debian linux, samba, fedoraproject fedora +2 more +4 moreA NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in...CVE-2020-10730Fix available6.5 Medium
- ntop ndpi, debian linux +1 moreIn nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in...CVE-2020-15472Fix available9.1 Critical
- ntop ndpi, debian linux +1 moreIn nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in...CVE-2020-15476Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...CVE-2020-15393Fix available5.5 Medium
- uclouvain openjpeg, debian linux, oracle outside in technology +2 morejp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if...CVE-2020-15389Fix available6.5 Medium
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturnCVE-2020-4067Fix available7.0 High
- canonical ubuntu linux, debian linux, ubuntu linux kernel (aufs filesystem module) +2 moreaufs: improperly managed inode reference counts in the vfsub_dentry_open() methodCVE-2020-11935Fix available4.4 Medium
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache TomcatCVE-2020-11996Public exploitFix availableEPSS 26.7%7.5 High
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in...CVE-2020-15305Fix available5.5 Medium
- Show moreLoading…