Skip to contentDebian Linux vulnerabilities
- fishshell fish, debian linux, fedoraproject fedora +1 more +3 moreInjection in fishCVE-2022-20001Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow occurs in vim in vim/vimCVE-2022-0943Fix available8.4 High
- clickhouse, debian linux +1 moreHeap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There...CVE-2021-43305Fix available8.8 High
- clickhouse, debian linux +1 moreHeap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There...CVE-2021-43304Fix available8.8 High
- clickhouse, debian linux +1 moreHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As...CVE-2021-42388Fix available8.1 High
- clickhouse, debian linux +1 moreHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As...CVE-2021-42387Fix available8.1 High
- openbsd openssh, debian linux +1 more** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key...CVE-2021-36368Fix availableDisputed3.7 Low
- debian linux, linux kernel, netapp active iq unified manager +7 more +9 moreAn issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...CVE-2022-26966Fix available5.5 Medium
- debian linux, horde mime viewer +1 morelib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice...CVE-2022-26874Fix available5.4 Medium
- teluu pjsip, debian linux, pjsip pjproject +2 moreBuffer overflow in pjsipCVE-2022-24754Fix available8.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreOut-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0924Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...CVE-2022-0909Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in...CVE-2022-0908Fix available7.7 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers...CVE-2022-0907Fix available5.5 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 moreDeeply nested json in jackson-databindCVE-2020-36518Public exploitFix available7.5 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23042Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23041Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23040Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23039Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23038Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23037Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23036Fix available7.0 High
- libpano13 project libpano13, debian linux +1 morePanorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function...CVE-2021-33293Fix available9.1 Critical
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreAn out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote...CVE-2021-32436Fix available6.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreStack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote...CVE-2021-32435Fix available5.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreabcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam...CVE-2021-32434Fix available5.5 Medium
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in graph configuration window of Zabbix FrontendCVE-2022-24919Fix available3.7 Low
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in service configuration window of Zabbix FrontendCVE-2022-24917Fix available3.7 Low
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in action configuration window of Zabbix FrontendCVE-2022-24349Fix available4.6 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreA heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4...CVE-2022-0891Public exploitFix available6.1 Medium
- rubyonrails active storage, debian linux, rails https://github.com/rails/rails +2 morePossible code injection vulnerability in Rails / Active StorageCVE-2022-21831Public exploitFix available9.8 Critical
- arm cortex-a57 firmware, cortex-a65 firmware, cortex-a65ae firmware +19 more +21 moreCertain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache...CVE-2022-23960Fix available5.6 Medium
- rust-lang regex, debian linux, fedoraproject fedora +2 moreRegular expression denial of service in Rust's regex crateCVE-2022-24713Public exploitFix availableEPSS 14.5%7.5 High
- spip, debian linux +1 moreSPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about...CVE-2022-26847Fix available5.3 Medium
- spip, debian linux +1 moreSPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary...CVE-2022-26846Fix available8.8 High
- tryton proteus, trytond, debian linux +2 moreImproper Restriction of XML External Entity Reference in trytond and proteusCVE-2022-26661Fix available6.5 Medium
- tryton proteus, trytond, debian linux +2 moreXML Entity Expansion in trytond and proteusCVE-2022-26662Fix available7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreReachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via...CVE-2022-0865Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 morest21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5...CVE-2022-26490Fix available7.8 High
- readymedia project readymedia, debian linux +1 moreA DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server...CVE-2022-26505Fix available7.4 High
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a...CVE-2022-26496Fix available9.8 Critical
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer...CVE-2022-26495Fix available9.8 Critical
- golang go, debian linux, netapp astra trident +2 moreregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...CVE-2022-24921Fix available7.5 High
- twisted, debian linux, fedoraproject fedora +2 more +4 moreBuffer Overflow in TwistedCVE-2022-21716Fix available7.5 High
- cacti, debian linux, fedoraproject fedora +2 moreUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.CVE-2022-0730Fix available9.8 Critical
- containerd, debian linux, fedoraproject fedora +2 moreInsecure handling of image volumes in containerd CRI pluginCVE-2022-23648Public exploitFix availableEPSS 27.4%7.5 High
- haproxy, debian linux, redhat enterprise linux +2 more +4 moreA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....CVE-2022-0711Fix availableEPSS 16.6%7.5 High
- scrapy, scrapy scrapy/scrapy, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapyCVE-2022-0577Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in...CVE-2022-0516Fix available7.8 High
- image processing project processing, janko image processing, debian linux +2 moreImproper Input Validation in image_processingCVE-2022-24720Fix available9.8 Critical
- Show moreLoading…