Skip to contentDebian Linux vulnerabilities
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...CVE-2020-35480Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...CVE-2020-35479Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...CVE-2020-35477Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...CVE-2020-35475Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 moreSerialization gadgets exploit in jackson-databindCVE-2020-35490Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 moreSerialization gadgets exploit in jackson-databindCVE-2020-35491Fix available8.1 High
- p11-kit project p11-kit, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreModerate: p11-kit security, bug fix, and enhancement updateCVE-2020-29361Fix available7.5 High
- p11-kit project p11-kit, debian linux, oracle communications cloud native core policy +3 more +5 moreModerate: p11-kit security, bug fix, and enhancement updateCVE-2020-29363Fix available7.5 High
- x-stream xstream, apache struts, debian linux +1 more +3 moreServer-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258Public exploitFix availableEPSS 81.8%6.3 Medium
- x-stream xstream, apache struts, debian linux +1 more +3 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259Public exploitFix availableEPSS 82.4%6.8 Medium
- debian linux, linux kernel, xen +3 more +5 moreAn issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The...CVE-2020-29569Fix available8.8 High
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are...CVE-2020-29568Fix available6.5 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read...CVE-2020-0499Fix available4.3 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A bounds check common to most operation time...CVE-2020-29571Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping...CVE-2020-29570Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When they require assistance from the device model...CVE-2020-29566Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored...CVE-2020-29486Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES...CVE-2020-29485Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client...CVE-2020-29484Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared...CVE-2020-29483Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute...CVE-2020-29482Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid....CVE-2020-29481Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any...CVE-2020-29480Fix available2.3 Low
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the...CVE-2020-29479Fix available8.8 High
- mozilla firefox, debian linux +1 moreWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...CVE-2020-26976Fix available6.5 Medium
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting...CVE-2020-35176Fix available5.3 Medium
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreMemory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...CVE-2020-26418Fix available3.1 Low
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreCrash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to...CVE-2020-26421Fix available4.2 Medium
- debian linux, linux kernel, netapp cloud backup +4 more +6 moreA use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (5.10-rc1). There...CVE-2020-27825Fix available5.7 Medium
- ini project ini, debian linux +1 morePrototype PollutionCVE-2020-7788Fix available7.3 High
- sympa, debian linux, fedoraproject fedora +2 moreSympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any...CVE-2020-29668Fix available3.7 Low
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This...CVE-2020-27824Public exploitFix available5.5 Medium
- debian linux, linux kernel, broadcom fabric operating system +8 more +10 moreA locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9...CVE-2020-29660Fix available4.4 Medium
- debian linux, linux kernel, broadcom fabric operating system +9 more +11 moreA locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers...CVE-2020-29661Public exploitFix available7.8 High
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x...CVE-2020-27823Fix available7.8 High
- openexr, debian linux +1 moreA head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData...CVE-2020-16589Fix available5.5 Medium
- openexr, debian linux +1 moreA Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in...CVE-2020-16588Fix available5.5 Medium
- openexr, debian linux +1 moreA heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in...CVE-2020-16587Fix available5.5 Medium
- qemu, debian linux +1 moreA flaw was found in the memory management API of QEMU during the initialization of a memory...CVE-2020-27821Fix available6.0 Medium
- apple icloud, ipados, itunes +9 more +11 moreA use after free issue was addressed with improved memory management. This issue is fixed in...CVE-2020-27918Fix available7.8 High
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is...CVE-2020-27758Fix available3.3 Low
- imagemagick, debian linux +1 moreA floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could...CVE-2020-27757Fix available3.3 Low
- imagemagick, debian linux +1 moreIn IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which...CVE-2020-27754Fix available3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted...CVE-2020-27751Fix available3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An...CVE-2020-27750Fix available5.5 Medium
- imagemagick, debian linux +1 moreIn CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and...CVE-2020-25676Fix available5.5 Medium
- imagemagick, debian linux +1 moreIn the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding...CVE-2020-25675Fix available3.3 Low
- imagemagick, debian linux +1 moreWriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit...CVE-2020-25674Fix available5.5 Medium
- Show moreLoading…