Skip to contentDebian Linux vulnerabilities
- cloudflare octorpki, debian linux +1 moreArbitrary filepath traversal via URI injectionCVE-2021-3907Fix available7.4 High
- cloudflare octorpki, debian linux +1 moreMisconfigured IP address field in ROA leads to OctoRPKI crashCVE-2021-3911Fix available4.2 Medium
- nlnet labs routinator, debian linux +1 moregzip transfer encoding caused out-of-memory crashCVE-2021-43174Fix available7.5 High
- nlnet labs routinator, debian linux +1 moreHanging RRDP requestCVE-2021-43173Fix available7.5 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow could occur when OpenEXR processes a crafted file on systems where size_t <...CVE-2021-3933Fix available5.5 Medium
- fort validator project validator, debian linux +1 moreFORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate...CVE-2021-43114Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...CVE-2020-25722Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-38003In KEVPublic exploitFix availableEPSS 38.6%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker...CVE-2021-38002Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to...CVE-2021-38001Public exploitFix availableEPSS 26.7%8.8 High
- google android, chrome, debian linux +2 more +4 moreInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0...CVE-2021-38000In KEVFix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a...CVE-2021-37999Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-37998Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who...CVE-2021-37997Fix available8.8 High
- golang go, debian linux, fedoraproject fedora +2 moreImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...CVE-2021-41771Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vimCVE-2021-3928Fix available7.3 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3927Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreOWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is...CVE-2021-35368Fix available9.8 Critical
- debian linux, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreAn issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds...CVE-2021-43389Fix available5.5 Medium
- bluez, debian linux +1 moreAn issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a...CVE-2021-43400Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free could have occured when an HTTP2 session object was released on a different...CVE-2021-43535Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 93 and...CVE-2021-43534Fix available8.8 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...CVE-2021-22960Fix available6.5 Medium
- htmldoc project htmldoc, debian linux +1 moreBuffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of...CVE-2021-40985Fix available5.5 Medium
- apache traffic server, debian linux +1 moreNot validating origin TLS certificateCVE-2021-38161Fix available8.1 High
- apache traffic server, debian linux +1 moreRequest Smuggling - multiple attacksCVE-2021-37149Fix available7.5 High
- apache traffic server, debian linux +1 moreRequest Smuggling - transfer encoding validationCVE-2021-37148Fix available7.5 High
- apache traffic server, debian linux +1 moreRequest Smuggling - LF line endingCVE-2021-37147Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...CVE-2021-38509Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy displaying a form validity message in the correct location at the same time as a permission...CVE-2021-38508Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...CVE-2021-38507Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of navigations, Firefox could have entered fullscreen mode without notification...CVE-2021-38506Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...CVE-2021-38504Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...CVE-2021-38503Fix available10.0 Critical
- gnome glib, debian linux, netapp active iq unified manager +2 moreA flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...CVE-2021-3800Fix available5.5 Medium
- android kernel, google android, debian linux +2 moreIn unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition....CVE-2021-0920In KEVFix available6.4 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3903Fix available7.3 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreLame cache can be abused to severely degrade resolver performanceCVE-2021-25219Fix availableEPSS 11.2%5.3 Medium
- google chrome, debian linux +1 moreInsufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54...CVE-2021-37996Fix available5.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a...CVE-2021-37995Fix available6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a...CVE-2021-37994Fix available6.5 Medium
- google chrome, debian linux +1 moreUse after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote...CVE-2021-37993Fix available8.8 High
- google chrome, debian linux +1 moreOut of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker...CVE-2021-37992Fix available8.8 High
- google chrome, debian linux +1 moreRace in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially...CVE-2021-37991Fix available7.5 High
- google chrome, debian linux +1 moreInappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed...CVE-2021-37990Fix available5.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote...CVE-2021-37989Fix available6.5 Medium
- google chrome, debian linux +1 moreUse after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who...CVE-2021-37988Fix available8.8 High
- Show moreLoading…