Skip to contentDebian Linux vulnerabilities
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted...CVE-2021-20244Fix available5.5 Medium
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file...CVE-2021-20243Fix available5.5 Medium
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,...CVE-2021-27645Fix available2.5 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...CVE-2021-23978Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...CVE-2021-23973Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...CVE-2021-23969Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...CVE-2021-23968Fix available4.3 Medium
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache BatikCVE-2020-11987Fix availableEPSS 13.6%8.2 High
- cacalabs libcaca, debian linux, fedoraproject fedora +2 moreA flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in...CVE-2021-3410Fix available7.8 High
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...CVE-2021-3407Fix availableEPSS 50.2%5.5 Medium
- matroska libebml, debian linux, fedoraproject fedora +2 moreA flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of...CVE-2021-3405Fix available6.5 Medium
- mbsync project mbsync, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by...CVE-2021-20247Fix available7.4 High
- qemu, debian linux, fedoraproject fedora +5 more +7 moreAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...CVE-2021-20257Fix available6.5 Medium
- smarty, debian linux +1 morePHP Code Injection by malicious function name in smartyCVE-2021-26120Fix availableEPSS 82.3%9.8 Critical
- smarty, debian linux +1 moreSandbox escape through template_object in smartyCVE-2021-26119Fix available7.5 High
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...CVE-2021-20203Fix available3.2 Low
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve...CVE-2021-27379Fix available7.8 High
- avahi, debian linux +1 moreavahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc...CVE-2021-26720Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether...CVE-2021-26933Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping...CVE-2021-26932Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net,...CVE-2021-26931Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service...CVE-2021-26930Fix available7.8 High
- isc bind, debian linux, fedoraproject fedora +5 more +7 moreA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackCVE-2020-8625Fix availableEPSS 65.4%8.1 High
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdateCVE-2021-23840Public exploitFix availableEPSS 51.1%7.5 High
- mumble, debian linux +1 moreMumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a...CVE-2021-27229Fix available8.8 High
- qemu, debian linux, redhat enterprise linux +2 moreAn out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller...CVE-2021-20221Fix available6.0 Medium
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...CVE-2021-27219Fix available7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...CVE-2021-27218Fix available7.5 High
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- horde groupware, debian linux +1 moreAn XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the...CVE-2021-26929Public exploitFix available6.1 Medium
- openldap, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...CVE-2021-27212Fix availableEPSS 66.1%7.5 High
- adminer, debian linux +1 moreSSRF in adminerCVE-2021-21311In KEVPublic exploitFix availableEPSS 98.5%7.2 High
- invisible-island xterm, debian linux, fedoraproject fedora +2 morexterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault...CVE-2021-27135Fix available9.8 Critical
- apache subversion, debian linux +1 moreRemote unauthenticated denial-of-service in Subversion mod_authz_svnCVE-2020-17525Fix availableEPSS 40.1%7.5 High
- genivi diagnostic log and trace, debian linux +1 moreThe daemon in GENIVI Diagnostic Log and Trace (DLT) before 2.18.6 has a heap-based buffer...CVE-2020-36244Fix available9.8 Critical
- openvswitch, debian linux, fedoraproject fedora +2 moreA vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...CVE-2020-35498Public exploitFix available7.5 High
- gnu screen, debian linux, fedoraproject fedora +2 moreencoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service ...CVE-2021-26937Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...CVE-2021-21148In KEVPublic exploitFix availableEPSS 20.0%8.8 High
- netty, debian linux, netapp active iq unified manager +10 more +12 moreLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary filesCVE-2021-21290Fix available6.2 Medium
- firejail project firejail, debian linux +1 moreFirejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is...CVE-2021-26910Fix available7.8 High
- php, debian linux, netapp clustered data ontap +1 more +3 moreNull Dereference in SoapClientCVE-2021-21702Fix available5.3 Medium
- intel connman, debian linux, opensuse leap +2 moregdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack...CVE-2021-26676Fix available6.5 Medium
- intel connman, debian linux, opensuse leap +2 moreA stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network...CVE-2021-26675Fix available8.8 High
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/gem.c. An attacker who submits a crafted file that...CVE-2021-20176Fix available5.5 Medium
- mechanize project mechanize, debian linux, fedoraproject fedora +2 moreCommand Injection Vulnerability in MechanizeCVE-2021-21289Fix available7.4 High
- docker, moby, debian linux +1 more +3 moreprivilege escalation in MobyCVE-2021-21284Fix available6.8 Medium
- docker, debian linux, moby +1 more +3 moreDocker daemon crash during image pull of malicious imageCVE-2021-21285Fix available6.5 Medium
- apple macos, mac os x, debian linux +2 moreAn input validation issue was addressed with improved memory handling. This issue is fixed in...CVE-2020-10001Fix available5.5 Medium
- qemu, debian linux +1 moreA race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2...CVE-2021-20181Fix available7.5 High
- Show moreLoading…