Skip to contentDebian Linux vulnerabilities
- gnome epiphany, debian linux, fedoraproject fedora +2 moreIn GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer...CVE-2022-29536Fix available7.5 High
- graphicsmagick, debian linux +1 moreIn GraphicsMagick, a heap buffer overflow was found when parsing MIFF.CVE-2022-1270Fix available7.8 High
- oracle graalvm, java se, azul zulu +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21496Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21476Fix available7.5 High
- oracle graalvm, azul zulu, debian linux +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21449Public exploitFix availableEPSS 77.2%7.5 High
- oracle graalvm, java se, azul zulu +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21443Fix available3.7 Low
- oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21434Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, debian linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported...CVE-2022-21427Fix available4.9 Medium
- oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21426Fix available5.3 Medium
- git, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreCommand InjectionCVE-2022-25648Fix available8.1 High
- dcraw project dcraw, debian linux +1 moreThere is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a...CVE-2021-3624Fix available7.8 High
- mediawiki, debian linux +1 moreA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...CVE-2022-28203Fix available7.5 High
- mediawiki, debian linux +1 moreAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...CVE-2022-28201Fix available4.4 Medium
- invisible-island ncurses, apple macos, debian linux +2 morencurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in...CVE-2022-29458Fix available7.1 High
- py-pdf pypdf2, debian linux +1 moreManipulated inline images can cause Infinite Loop in PyPDF2CVE-2022-24859Fix available6.2 Medium
- ruby-lang ruby, apple macos, debian linux +2 moreThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...CVE-2022-28739Fix available7.5 High
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreStored XSS and path traversal in LDAPAccountManager/lamCVE-2022-24851Fix available8.1 High
- irzip project irzip, debian linux +1 moreIrzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c...CVE-2022-28044Fix available9.8 Critical
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function...CVE-2022-28042Fix available8.8 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an integer overflow via the function...CVE-2022-28041Fix available6.5 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The...CVE-2022-26651Fix available9.8 Critical
- digium asterisk, debian linux +1 moreAn SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to...CVE-2022-26499Fix available9.1 Critical
- digium asterisk, debian linux +1 moreAn issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to...CVE-2022-26498Fix availableEPSS 16.5%7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...CVE-2022-27456Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...CVE-2022-27452Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...CVE-2022-27449Fix available7.5 High
- mariadb, debian linux +1 moreThere is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos ==...CVE-2022-27448Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a use-after-free via the component...CVE-2022-27447Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...CVE-2022-27445Fix available7.5 High
- mutt, debian linux, fedoraproject fedora +2 moreBuffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3...CVE-2022-1328Fix available4.3 Medium
- mariadb, debian linux +1 moreMariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the...CVE-2022-27387Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component...CVE-2022-27386Fix available7.5 High
- mariadb, debian linux +1 moreAn issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and...CVE-2022-27384Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6 and below was discovered to contain an use-after-free in the component...CVE-2022-27383Fix available7.5 High
- mariadb, debian linux +1 moreAn issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to...CVE-2022-27381Fix available7.5 High
- mariadb, debian linux +1 moreAn issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was...CVE-2022-27380Fix available7.5 High
- mariadb, debian linux +1 moreAn issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below...CVE-2022-27379Fix available7.5 High
- mariadb, debian linux +1 moreAn issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was...CVE-2022-27378Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...CVE-2022-27377Fix available7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component...CVE-2022-27376Fix available7.5 High
- debian linux, linux kernel +1 moreA use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw...CVE-2022-1195Fix available5.5 Medium
- git-for-windows git, apple xcode, debian linux +1 more +3 moreUncontrolled search for the Git directory in Git for WindowsCVE-2022-24765Public exploitFix available6.0 Medium
- djangoproject django, debian linux +1 moreSQL Injection in DjangoCVE-2022-28347Fix available9.8 Critical
- djangoproject django, debian linux +1 moreSQL Injection in DjangoCVE-2022-28346Public exploitFix availableEPSS 18.7%9.8 Critical
- debian linux, linux kernel, netapp h300e firmware +10 more +12 moreThe SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring...CVE-2022-28893Fix available7.8 High
- nokogiri, apple macos, debian linux +1 more +3 moreInefficient Regular Expression Complexity in NokogiriCVE-2022-24836Fix available7.5 High
- gnu gzip, debian linux, redhat jboss data grid +5 more +7 moreAn arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...CVE-2022-1271Fix available8.8 High
- wisc htcondor, debian linux +1 moreAn issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9...CVE-2022-26110Fix available8.8 High
- pjsip pjproject, pjsip, debian linux +2 morePotential heap buffer overflow when parsing DNS packets in PJSIPCVE-2022-24793Fix available7.5 High
- pjsip pjproject, pjsip, debian linux +2 morePotential out-of-bound read/write in PJSIPCVE-2022-24786Fix available9.8 Critical
- Show moreLoading…