Skip to contentDebian Linux vulnerabilities
- cisco clamav, canonical ubuntu linux, debian linux +2 moreClam AntiVirus (ClamAV) Denial of Service VulnerabilityCVE-2022-20698Fix available7.5 High
- fig2dev project fig2dev, debian linux +1 moreA denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the...CVE-2021-37530Fix available5.5 Medium
- fig2dev project fig2dev, debian linux +1 moreA double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream...CVE-2021-37529Fix available5.5 Medium
- debian linux, fedoraproject fedora, gnome gdkpixbuf +2 moreGNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the...CVE-2021-44648Fix available8.8 High
- debian linux, flatpak, fedoraproject fedora +1 more +3 morePermissions granted to applications can be hidden from the user at install timeCVE-2021-43860Fix available8.2 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper...CVE-2021-4204Public exploitFix available7.1 High
- struktur libde265, debian linux +1 moreAn issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a...CVE-2021-36411Fix available5.5 Medium
- struktur libde265, debian linux +1 moreA stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function...CVE-2021-36410Fix available5.5 Medium
- struktur libde265, debian linux +1 moreThere is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1...CVE-2021-36409Fix available7.8 High
- struktur libde265, debian linux +1 moreAn issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when...CVE-2021-36408Fix available5.5 Medium
- struktur libde265, debian linux +1 moreAn Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.CVE-2021-35452Fix available6.5 Medium
- smarty, debian linux, fedoraproject fedora +2 moreSandbox Escape by math function in smartyCVE-2021-29454Fix available8.1 High
- smarty, debian linux, fedoraproject fedora +2 moreAccess to restricted PHP code by dynamic static class access in smartyCVE-2021-21408Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moreaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22822Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morebuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22823Fix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moredefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22824Fix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morelookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22825Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morenextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22826Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22827Fix available8.8 High
- libtiff, debian linux, netapp ontap select deploy administration utility +2 moreLibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations...CVE-2022-22844Fix available5.5 Medium
- python pillow, debian linux +1 moreArbitrary expression injection in PillowCVE-2022-22817Fix available9.8 Critical
- python pillow, debian linux +1 moreOut-of-bounds Read in PillowCVE-2022-22816Fix available6.5 Medium
- python pillow, debian linux +1 moreImproper Initialization in PillowCVE-2022-22815Fix available6.5 Medium
- h2database h2, debian linux, oracle communications cloud native core policy +2 moreRCE in H2 ConsoleCVE-2021-42392Public exploitFix availableEPSS 83.2%9.8 Critical
- wordpress, debian linux, wordpress wordpress-develop +2 moreStored XSS in WordPressCVE-2022-21662Fix availableEPSS 64.5%8.0 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated Object Injection in Multisites in WordPressCVE-2022-21663Fix available6.6 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21664Fix available7.4 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21661Public exploitFix availableEPSS 97.8%8.0 High
- lighttpd, debian linux +1 moreIn lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward...CVE-2022-22707Fix available5.9 Medium
- roundcube, debian linux +1 moreRoundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted...CVE-2021-46144Fix available6.1 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46141Fix available5.5 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46142Fix available5.5 Medium
- sphinxsearch sphinx, debian linux +1 moreSphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in...CVE-2020-29050Fix available7.5 High
- libsndfile project libsndfile, debian linux +1 moreAn out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is...CVE-2021-4156Fix available7.1 High
- nltk, nltk nltk/nltk, debian linux +1 more +3 moreInefficient Regular Expression Complexity in nltk/nltkCVE-2021-3842Fix available7.5 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreMissing release of locks in PJSIPCVE-2021-41141Fix available5.9 Medium
- giftrans project giftrans, debian linux +1 moreThe giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value...CVE-2021-459727.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- artifex ghostscript, debian linux +1 moreGhostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from...CVE-2021-45944Fix available5.5 Medium
- artifex ghostscript, debian linux +1 moreGhostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish ...CVE-2021-45949Fix available5.5 Medium
- ultrajson project ultrajson, debian linux, fedoraproject fedora +2 moreUltraJSON vulnerable to Out-of-bounds WriteCVE-2021-45958Fix available5.5 Medium
- debian linux, linux kernel +1 moreA vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due...CVE-2021-4149Fix available5.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +5 more +7 moreKernel: security regression for cve-2018-13405CVE-2021-4037Fix available4.4 Medium
- squid-cache squid, debian linux +1 moreImportant: squid:4 security updateCVE-2021-46784Fix available6.5 Medium
- osgeo gdal, debian linux, fedoraproject fedora +1 more +3 moreGDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile ...CVE-2021-45943Fix available5.5 Medium
- openexr, debian linux, fedoraproject fedora +2 moreOpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:...CVE-2021-45942Fix available5.5 Medium
- debian linux, fedoraproject fedora, qt qtsvg +2 moreQt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate...CVE-2021-45930Fix available5.5 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-4197Fix available7.8 High
- vim, vim vim/vim, apple mac os x +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2021-4193Fix available5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 moreUse After Free in vim/vimCVE-2021-4192Fix available5.5 Medium
- Show moreLoading…