Skip to contentDebian Linux vulnerabilities
- eventsource, eventsource eventsource/eventsource, debian linux +2 moreImproper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsourceCVE-2022-1650Fix available8.1 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...CVE-2022-27782Fix available7.5 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing...CVE-2022-1623Fix available5.5 Medium
- dogtag jss, debian linux, dogtagpki network security services for java +1 more +3 moreA flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted...CVE-2021-4213Fix available7.5 High
- htmldoc project htmldoc, debian linux +1 moreThere is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls...CVE-2022-27114Fix available5.5 Medium
- debian linux, rarlab unrar +1 moreRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an...CVE-2022-30333In KEVPublic exploitFix availableEPSS 99.2%7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap buffer overflow in vim_strncpy find_word in vim/vimCVE-2022-1621Fix available7.3 High
- admesh project admesh, debian linux +1 moreOut-of-bounds read in admeshCVE-2018-25033Fix available8.1 High
- imagemagick, debian linux +1 moreImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.CVE-2022-28463Fix available7.8 High
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619Fix available6.1 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse after free in append_command in vim/vimCVE-2022-1616Fix available7.3 High
- webkitgtk, debian linux +1 moreIn WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore:...CVE-2022-30293Fix available7.5 High
- ecdsautils project ecdsautils, debian linux, fedoraproject fedora +2 moreTrivial signature forgery in ecdsautilsCVE-2022-24884Fix available10.0 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 moreA logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...CVE-2022-27337Fix available6.5 Medium
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information...CVE-2022-29500Fix available8.8 High
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of...CVE-2022-29501Fix available8.8 High
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslogCVE-2022-24903Public exploitFix available8.1 High
- openldap, debian linux, netapp h300s firmware +8 more +10 moreIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...CVE-2022-29155Fix availableEPSS 64.5%9.8 Critical
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20796Fix available6.5 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022CVE-2022-20785Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20771Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20770Fix available8.6 High
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42529Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42531Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42530Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42532Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit Null Pointer Dereference Application denial-of-serviceCVE-2021-42528Fix available5.5 Medium
- debian linux, tuxera ntfs-3g, fedoraproject fedora +2 morentfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2....CVE-2021-46790Fix available7.8 High
- sinatrarb sinatra, debian linux +1 moresinatra does not validate expanded path matchesCVE-2022-29970Fix available7.5 High
- debian linux, linux kernel +1 moreA NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network...CVE-2022-1516Fix available5.5 Medium
- debian linux, linux kernel +1 moreThe root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease...CVE-2022-1419Fix available7.8 High
- google gson, debian linux, netapp active iq unified manager +3 more +5 moreDeserialization of Untrusted DataCVE-2022-25647Fix availableEPSS 12.2%7.7 High
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the QXL display device emulation in QEMU. An integer overflow in the...CVE-2021-4206Fix available8.2 High
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled...CVE-2021-4207Fix available8.2 High
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel....CVE-2022-1353Fix available7.1 High
- samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...CVE-2022-29869Fix available5.3 Medium
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 moreXSS Vulnerability in Action View tag helpersCVE-2022-27777Fix available6.1 Medium
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 moreCross-site Scripting Vulnerability in Action PackCVE-2022-22577Fix available6.1 Medium
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...CVE-2022-27775Fix available7.5 High
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 High
- samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...CVE-2022-27239Fix available7.8 High
- artifex ghostscript, debian linux +1 moreArtifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an...CVE-2019-25059Fix available7.8 High
- teluu pjsip, debian linux, pjsip pjproject +2 morePotential infinite loop when parsing WAV format file in PJSIPCVE-2022-24792Fix available7.5 High
- gpac, debian linux +1 moreMP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion....CVE-2022-1441Fix available7.8 High
- debian linux, linux kernel +1 moreIn the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in...CVE-2022-29582Public exploitFix available7.0 High
- Show moreLoading…