Skip to contentDebian Linux vulnerabilities
- libreoffice, debian linux +1 moreWeak Master KeysCVE-2022-26307Fix available8.8 High
- libreoffice, debian linux +1 moreExecution of Untrusted Macros Due to Improper Certificate ValidationCVE-2022-26306Fix available7.5 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...CVE-2021-46829Fix available7.8 High
- mod wsgi wsgi, debian linux, modwsgi mod wsgi +2 moreIncorrect header handling in mod-wsgiCVE-2022-2255Fix available7.5 High
- tzinfo, debian linux +1 moreTZInfo relative path traversal vulnerability allows loading of arbitrary filesCVE-2022-31163Fix available7.5 High
- libtirpc project libtirpc, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process...CVE-2021-46828Fix available7.5 High
- gnu sasl, debian linux +1 moreGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API clientCVE-2022-2469Fix available3.8 Low
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21549Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21541Fix available5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21540Fix available5.3 Medium
- thenify project thenify, debian linux, fedoraproject fedora +2 moreArbitrary Code ExecutionCVE-2020-7677Fix available8.6 High
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text labelCVE-2022-31160Public exploitFix available6.1 Medium
- linux kernel, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreWhen sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory...CVE-2021-33655Fix available6.7 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer...CVE-2021-40874Fix available9.8 Critical
- debian linux, lemonldap-ng lemonldap\ +1 moreIn LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not...CVE-2020-16093Fix available7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,...CVE-2022-35409Fix available9.1 Critical
- llhttp, nodejs node, node.js +4 more +6 moreThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...CVE-2022-32215Fix availableEPSS 70.2%6.5 Medium
- llhttp, nodejs node, node.js +2 more +4 morellhttp allows HTTP Request Smuggling via Improper Delimiting of Header FieldsCVE-2022-32214Fix availableEPSS 81.8%6.5 Medium
- llhttp, nodejs node, node.js +4 more +6 morellhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-EncodingCVE-2022-32213Fix availableEPSS 44.8%6.5 Medium
- nodejs node, node.js, debian linux +2 more +4 moreA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...CVE-2022-32212Fix available8.1 High
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- linux kernel, debian linux, openatom openeuler +2 moreWhen setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.CVE-2021-33656Fix available6.8 Medium
- debian linux, fedoraproject fedora, intel core i3-6100 firmware +127 more +129 moreArbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)CVE-2022-29901Fix available5.6 Medium
- git, apple xcode, debian linux +1 more +3 moreBypass of safe.directory protections in GitCVE-2022-29187Fix available7.8 High
- qemu, debian linux +1 moresoftmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...CVE-2022-35414Fix availableDisputed8.8 High
- 0xacab mat2, debian linux +1 moremat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.CVE-2022-35410Fix available7.5 High
- net-snmp, debian linux, fedoraproject fedora +2 morenet-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.CVE-2022-24810Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24809Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24808Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory accessCVE-2022-24807Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneouslyCVE-2022-24806Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.CVE-2022-24805Fix available6.5 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- dovecot, debian linux +1 moreAn issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two...CVE-2022-30550Fix available8.8 High
- apache commons configuration, debian linux, netapp snapcenter +2 moreApache Commons Configuration insecure interpolation defaultsCVE-2022-33980Public exploitFix availableEPSS 44.6%9.8 Critical
- moment, debian linux, fedoraproject fedora +2 moreInefficient Regular Expression Complexity in momentCVE-2022-31129Fix available7.5 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreThere are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of...CVE-2022-2318Fix available5.5 Medium
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-33742Fix available7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-33741Fix available7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-33740Fix available7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-26365Fix available7.1 High
- debian linux, linux kernel, xen +2 morenetwork backend may cause Linux netfront to use freed SKBs While adding logic to support XDP ...CVE-2022-33743Fix available7.8 High
- debian linux, linux kernel +1 moreArm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using...CVE-2022-33744Fix available4.7 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreStack-based Buffer Overflow in vim/vimCVE-2022-2304Fix available7.8 High
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...CVE-2022-34918Public exploitFix available7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreInteger Overflow or Wraparound in vim/vimCVE-2022-2285Fix available7.8 High
- Show moreLoading…