Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 moreA slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local...CVE-2020-28974Fix available5.0 Medium
- imagemagick, debian linux +1 moreStack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick...CVE-2020-19667Fix available7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDeserialization of Untrusted Data in Archive_TarCVE-2020-28948Public exploitFix availableEPSS 47.5%7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreMultiple vulnerabilities through filename manipulation in Archive_TarCVE-2020-28949In KEVPublic exploitFix availableEPSS 84.6%7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through...CVE-2020-28941Fix available5.5 Medium
- influxdata influxdb, debian linux +1 moreImproper Authentication in InfluxDBCVE-2019-20933Public exploitFix availableEPSS 32.3%9.8 Critical
- jupyter notebook, debian linux +1 moreOpen redirect in Jupyter NotebookCVE-2020-26215Fix available4.4 Medium
- qemu, debian linux +1 moreA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...CVE-2020-25723Fix available3.2 Low
- x-stream xstream, apache activemq, debian linux +12 more +14 moreRemote Code Execution in XStreamCVE-2020-26217Public exploitFix availableEPSS 85.0%8.0 High
- debian linux, linux kernel, starwindsoftware command center +3 more +5 moreA flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if...CVE-2020-25704Fix available5.5 Medium
- openldap, debian linux, fedoraproject fedora +7 more +9 moreA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...CVE-2020-25710Fix available7.5 High
- openldap, apple mac os x, macos +5 more +7 moreA flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...CVE-2020-25709Fix available7.5 High
- libvnc libvncserver, debian linux, redhat enterprise linux +2 moreA divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use...CVE-2020-25708Fix available7.5 High
- postgresql, debian linux +1 moreIncorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQLCVE-2020-25696Fix available7.5 High
- postgresql, debian linux +1 moreSQL InjectionCVE-2020-25695Fix availableEPSS 46.4%8.8 High
- postgresql, debian linux +1 moreUse of a Broken or Risky Cryptographic Algorithm in PostgreSQLCVE-2020-25694Fix available8.1 High
- red hat ansible, redhat ansible engine, debian linux +2 moreInsufficiently random values in AnsibleCVE-2020-10729Fix available5.5 Medium
- cacti, debian linux +1 moreA cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to...CVE-2020-25706Fix available5.4 Medium
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreA flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem...CVE-2020-25656Fix available4.1 Medium
- xen, debian linux, fedoraproject fedora +2 moreXen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES...CVE-2020-28368Fix available4.4 Medium
- debian linux, fedoraproject fedora, intel microcode +14 more +16 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-8698Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel microcode +4 more +6 moreImproper removal of sensitive information before storage or transfer in some Intel(R) Processors...CVE-2020-8696Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel celeron 3855u firmware +298 more +300 moreObservable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged...CVE-2020-8695Fix available5.5 Medium
- moinmo moinmoin, debian linux +1 moreMoinMoin vulnerable to remote code execution via cache actionCVE-2020-25074Fix available9.8 Critical
- librdf raptor rdf syntax library, debian linux, fedoraproject fedora +2 moreraptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15...CVE-2017-18926Fix available7.1 High
- qemu, debian linux +1 moreeth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...CVE-2020-27617Fix available6.5 Medium
- asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 moreAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...CVE-2020-28242Fix available6.5 Medium
- maxmind libmaxminddb, debian linux, fedoraproject fedora +2 morelibmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.CVE-2020-28241Fix available6.5 Medium
- apache shiro, debian linux +1 moreAuthentication bypass in Apache ShiroCVE-2020-17510Fix available9.8 Critical
- debian linux, linux kernel, netapp cloud backup +10 more +12 moreA vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been...CVE-2020-25669Fix available7.8 High
- tcpdump, apple mac os x, macos +2 more +4 moreppp decapsulator can be convinced to allocate a large amount of memoryCVE-2020-8037Fix available7.5 High
- saltstack salt, debian linux +1 moreSaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapiCVE-2020-25592Public exploitFix availableEPSS 57.7%9.8 Critical
- saltstack salt, debian linux +1 moreSaltStack Salt Allows creating certificates with weak file permissionsCVE-2020-17490Fix available5.5 Medium
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 moreSaltStack Salt Command Injection in netapi ssh clientCVE-2020-16846In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- sddm project sddm, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that -...CVE-2020-28049Fix available6.3 Medium
- google chrome, debian linux, opensuse backports sle +1 more +3 moreHeap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote...CVE-2020-16011Fix available9.6 Critical
- google chrome, cefsharp, debian linux +6 more +8 moreInappropriate implementation in V8CVE-2020-16009In KEVFix availableEPSS 48.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreStack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker...CVE-2020-16008Fix available8.8 High
- google chrome, debian linux, opensuse backports sle +1 more +3 moreInsufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local...CVE-2020-16007Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16006Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16005Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16004Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to...CVE-2020-15995Fix available8.8 High
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA race condition vulnerability was found in the way the spice-vdagentd daemon handled new client...CVE-2020-25653Fix available6.3 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the spice-vdagentd daemon, where it did not properly handle client...CVE-2020-25652Fix available5.5 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the SPICE file transfer protocol. File data from the host system can end up...CVE-2020-25651Fix available6.4 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system...CVE-2020-25650Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA memory leak vulnerability was found in Linux kernel in llcp_sock_connectCVE-2020-25672Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing...CVE-2020-25671Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +11 more +13 moreA vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use...CVE-2020-25670Fix available7.8 High
- Show moreLoading…