Skip to contentDebian Linux vulnerabilities
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...CVE-2021-30157Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30158Fix available5.3 Medium
- contribsys sidekiq, debian linux +1 moreCross-site Scripting in SidekiqCVE-2021-30151Fix available6.1 Medium
- phpseclib, debian linux +1 moreImproper Certificate Validation in phpseclibCVE-2021-30130Fix available7.5 High
- libpano13, debian linux, fedoraproject fedora +2 moreFormat string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and...CVE-2021-20307Fix available9.8 Critical
- htmldoc project htmldoc, debian linux +1 moreInteger overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code...CVE-2021-20308Fix available9.8 Critical
- [unknown] nettle, debian linux, fedoraproject fedora +6 more +8 moreA flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification...CVE-2021-20305Fix available8.1 High
- python, debian linux, fedoraproject fedora +10 more +12 moreThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...CVE-2021-3426Fix available5.7 Medium
- debian linux, linux kernel +1 moreThe fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn...CVE-2021-28688Fix available6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4...CVE-2021-1844Fix available8.8 High
- apple ipados, macos, ios and ipados +5 more +7 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2...CVE-2021-1871In KEVFix available9.8 Critical
- apple ipados, macos, safari +7 more +9 moreA use after free issue was addressed with improved memory management. This issue is fixed in...CVE-2021-1788Fix available8.8 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists....CVE-2021-30002Fix available6.2 Medium
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an...CVE-2021-20296Fix available5.3 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker...CVE-2021-3479Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An...CVE-2021-3478Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An...CVE-2021-3477Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c...CVE-2021-29647Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows...CVE-2021-29650Fix available5.5 Medium
- netty, debian linux, netapp oncommand api services +15 more +17 morePossible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409Fix available5.9 Medium
- eterna ircii, debian linux +1 moreircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault...CVE-2021-29376Fix available7.5 High
- academysoftwarefoundation openexr, debian linux +1 moreA flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An...CVE-2021-3476Fix available5.3 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted...CVE-2021-3475Fix available5.3 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed...CVE-2021-3474Fix available5.3 Medium
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 morecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...CVE-2021-22890Fix available3.7 Low
- haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 morecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...CVE-2021-22876Fix available5.3 Medium
- jashkenas underscore, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code InjectionCVE-2021-23358Public exploitFix available3.3 Low
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale...CVE-2021-29264Fix available5.5 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb...CVE-2021-29265Fix available4.7 Medium
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreThere is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau...CVE-2021-20292Fix available6.7 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can...CVE-2021-20277Fix available7.5 High
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to...CVE-2020-27840Fix available7.5 High
- qemu, debian linux, fedoraproject fedora +1 more +3 moreThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...CVE-2021-3409Fix available5.7 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while...CVE-2021-3392Fix available3.2 Low
- debian linux, linux kernel, canonical ubuntu linux +2 moreLinux kernel bpf verifier incorrect mod32 truncationCVE-2021-3444Fix available7.8 High
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351Fix availableEPSS 82.1%5.4 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21350Fix availableEPSS 15.2%5.3 Medium
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349Public exploitFix availableEPSS 46.8%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348Fix availableEPSS 13.8%5.3 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21347Fix availableEPSS 14.3%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21346Fix availableEPSS 76.4%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-21345Public exploitFix availableEPSS 72.3%5.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21344Fix availableEPSS 76.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343Fix availableEPSS 46.7%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342Fix availableEPSS 50.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +10 more +12 moreXStream can cause a Denial of ServiceCVE-2021-21341Public exploitFix availableEPSS 77.8%7.5 High
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreIn intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on...CVE-2021-28971Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreA race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5...CVE-2021-28964Fix available4.7 Medium
- lxml, debian linux, fedoraproject fedora +2 more +4 morelxml vulnerable to Cross-Site ScriptingCVE-2021-28957Fix available6.1 Medium
- Show moreLoading…