Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15968Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15967Fix available8.8 High
- imagemagick, debian linux, opensuse leap +2 moreImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which...CVE-2020-27560Fix available3.3 Low
- oracle mysql, oracle corporation mysql server, debian linux +6 more +8 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported...CVE-2020-14812Fix available4.9 Medium
- debian linux, netapp 7-mode transition tool, active iq unified manager +18 more +20 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-14803Fix available5.3 Medium
- debian linux, netapp 7-mode transition tool, active iq unified manager +16 more +18 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14798Fix available3.1 Low
- debian linux, netapp 7-mode transition tool, active iq unified manager +16 more +18 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14797Fix available3.7 Low
- debian linux, netapp 7-mode transition tool, active iq unified manager +16 more +18 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14796Fix available3.1 Low
- debian linux, mcafee epolicy orchestrator, netapp 7-mode transition tool +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot)....CVE-2020-14792Fix available4.2 Medium
- debian linux, mcafee epolicy orchestrator, netapp active iq unified manager +14 more +16 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14782Fix available3.7 Low
- debian linux, netapp 7-mode transition tool, active iq unified manager +15 more +17 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI)....CVE-2020-14781Fix available3.7 Low
- debian linux, fedoraproject fedora, netapp 7-mode transition tool +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-14779Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, debian linux +6 more +8 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported...CVE-2020-14765Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers and community members reported memory safety bugs present in Firefox 81 and...CVE-2020-15683Fix available9.8 Critical
- freetype, google chrome, debian linux +4 more +6 moreHeap buffer overflow in CefSharpCVE-2020-15999In KEVPublic exploitFix availableEPSS 63.9%9.6 Critical
- apple safari, icloud, ipados +6 more +8 moreA use after free issue was addressed with improved memory management. This issue is fixed in...CVE-2020-9951Fix available8.8 High
- apple safari, debian linux, webkit webkitgtk\+ +2 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in Safari...CVE-2020-9948Fix available8.8 High
- bluez, debian linux, opensuse leap +2 moreIn BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared...CVE-2020-27153Fix available8.6 High
- containerd, canonical ubuntu linux, debian linux +2 morecontainerd can be coerced into leaking credentials during image pullCVE-2020-15157Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve...CVE-2020-25645Fix available7.5 High
- mariadb, debian linux, galeracluster galera cluster for mysql +1 more +3 moreImportant: mariadb:10.3 security, bug fix, and enhancement updateCVE-2020-15180Fix available9.0 Critical
- canonical linux kernel, ubuntu linux, debian linux +1 more +3 moreDCCP CCID structure use-after-freeCVE-2020-16119Fix available6.3 Medium
- junit junit4, apache pluto, debian linux +1 more +3 moreInformation disclosure in JUnit4CVE-2020-15250Fix available4.4 Medium
- apache tomcat, debian linux, oracle instantis enterprisetrack +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-13943Fix availableEPSS 52.6%4.3 Medium
- phpmyadmin, debian linux, fedoraproject fedora +2 more +4 morephpMyAdmin Cross-site Scripting (XSS)CVE-2020-26934Fix available6.1 Medium
- phpmyadmin, debian linux, fedoraproject fedora +2 more +4 morephpMyAdmin SQL injection vulnerabilityCVE-2020-26935Fix availableEPSS 63.7%9.8 Critical
- sympa, debian linux, fedoraproject fedora +2 moreSympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full...CVE-2020-26880Fix available7.8 High
- cure53 dompurify, debian linux, microsoft visual studio 2017 +2 more +4 moreCross-site Scripting in dompurifyCVE-2020-26870Fix available6.1 Medium
- sympa, debian linux +1 moredebian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for...CVE-2020-26932Fix available4.3 Medium
- google chrome, apple ipados, iphone os +7 more +9 moreUse after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to...CVE-2020-15969Fix available8.8 High
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...CVE-2020-26575Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector...CVE-2020-25863Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreIn Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash....CVE-2020-25862Fix available7.5 High
- red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 moreMultiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the...CVE-2020-14355Fix available6.6 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer...CVE-2020-26570Fix available5.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer...CVE-2020-26571Fix available5.5 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreThe TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow...CVE-2020-26572Fix available5.5 Medium
- debian linux, linux kernel, netapp h410c firmware +3 more +5 moreA flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory...CVE-2020-25643Fix available7.2 High
- zabbix, debian linux, opensuse backports sle +1 more +3 moreZabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary...CVE-2020-11800Public exploitFix available9.0 Critical
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- artifex mupdf, debian linux, fedoraproject fedora +2 morefitz/pixmap.c in Artifex MuPDF 1.17.0 has an overflow during pixmap size calculation.CVE-2020-26519Fix available5.5 Medium
- debian linux, nette application +1 moreRemote Code Execution vulnerabilityCVE-2020-15227Public exploitFix availableEPSS 34.4%8.7 High
- google android, debian linux +1 moreIn binder_release_work of binder.c, there is a possible use-after-free due to improper locking....CVE-2020-0423Public exploitFix available7.8 High
- encode django rest framework, debian linux, redhat ceph storage +2 moreCross-site Scripting (XSS) in Django REST FrameworkCVE-2020-25626Fix available6.1 Medium
- libproxy project libproxy, debian linux, fedoraproject fedora +1 more +3 moreurl.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as...CVE-2020-26154Fix available9.8 Critical
- python urllib3, canonical ubuntu linux, debian linux +2 more +4 moreCRLF injection in urllib3CVE-2020-26137Fix available6.5 Medium
- tigervnc, debian linux, opensuse leap +2 moreIn rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle...CVE-2020-26117Fix available8.1 High
- python, canonical ubuntu linux, debian linux +8 more +10 morehttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...CVE-2020-26116Fix available7.2 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A...CVE-2020-25641Fix available5.5 Medium
- Show moreLoading…