Skip to contentDebian Linux vulnerabilities
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- yaws, canonical ubuntu linux, debian linux +2 moreCGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.CVE-2020-24916Fix availableEPSS 17.4%9.8 Critical
- yaws, canonical ubuntu linux, debian linux +2 moreWebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.CVE-2020-24379Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local...CVE-2020-25212Fix available7.0 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration...CVE-2020-25211Fix available6.0 Medium
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreRaccoon attackCVE-2020-1968Fix available3.7 Low
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, arista access point, debian linux +11 more +13 moreu'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead...CVE-2020-3702Fix available6.5 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreLack of URL normalization may lead to authorization bypass when URL access rules are usedCVE-2020-24660Fix available9.8 Critical
- debian linux, fedoraproject fedora, zeromq libzmq +2 moreDenial of Service in ZeroMQCVE-2020-15166Fix available7.5 High
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreImproper Verification of Cryptographic Signature in ansibleCVE-2020-14365Fix available7.1 High
- pypa pip, debian linux, opensuse leap +2 more +4 morePath Traversal in pipCVE-2019-20916Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft softwareCVE-2020-14386Public exploitFix available6.7 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- gruntjs grunt, canonical ubuntu linux, debian linux +2 moreArbitrary Code ExecutionCVE-2020-7729Fix available7.1 High
- arm mbed tls, debian linux, fedoraproject fedora +2 moreA Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...CVE-2020-16150Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6571Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to...CVE-2020-6570Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who...CVE-2020-6569Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6568Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in command line handling in Google Chrome on Windows...CVE-2020-6567Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6566Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6565Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6564Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6563Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6562Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83...CVE-2020-6561Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6560Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6559Fix available8.8 High
- google chrome, debian linux, opensuse backports sle +1 more +3 moreInsufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6558Fix available6.5 Medium
- flask-cors project flask-cors, debian linux, opensuse backports sle +1 more +3 moreFlask-Cors Directory Traversal vulnerabilityCVE-2020-25032Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4...CVE-2020-14314Fix available5.5 Medium
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the...CVE-2020-24654Fix available3.3 Low
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote...CVE-2020-6556Fix available8.8 High
- php, debian linux, tenable tenable.sc +2 moreUse of freed hash key in the phar_parse_zipfile functionCVE-2020-7068Fix available4.8 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 moreCode Injection in jackson-databindCVE-2020-24616Public exploitFix available8.1 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2020-24606Fix available8.6 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...CVE-2020-14364Public exploitFix available5.0 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15811Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15810Fix available6.5 Medium
- isc bind, canonical ubuntu linux, debian linux +4 more +6 moreupdate-policy rules of type "subdomain" are enforced incorrectlyCVE-2020-8624Fix available4.3 Medium
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cCVE-2020-8623Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failureCVE-2020-8622Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10...CVE-2020-14356Public exploitFix available7.8 High
- icinga web 2, debian linux, suse package hub +2 moreIcinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability...CVE-2020-24368Fix available7.5 High
- haxx libcurl, debian linux, oracle communications cloud native core policy +5 more +7 moreDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...CVE-2020-8231Fix available7.5 High
- apache shiro, debian linux +1 moreAuthentication bypass in Apache ShiroCVE-2020-13933Public exploitFix availableEPSS 44.4%7.5 High
- microsoft netlogon, canonical ubuntu linux, debian linux +24 more +26 moreNetlogon Elevation of Privilege VulnerabilityCVE-2020-1472In KEVPublic exploitFix availableEPSS 99.4%5.5 Medium
- lua, debian linux, fedoraproject fedora +2 moreldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal,...CVE-2020-24370Public exploitFix available5.3 Medium
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreUntrusted Search Path in PostgreSQLCVE-2020-14350Fix available7.3 High
- snmptt, debian linux +1 moreSNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.CVE-2020-24361Fix available9.8 Critical
- Show moreLoading…