Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2...CVE-2022-42719Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreAn issue was discovered in the Linux kernel through 5.19.11. Attackers able to inject WLAN frames...CVE-2022-41674Fix available8.1 High
- webpack.js loader-utils, debian linux +1 morePrototype pollution in webpack loader-utilsCVE-2022-37601Fix available9.8 Critical
- dropbear ssh project ssh, debian linux +1 moreAn issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the...CVE-2021-36369Fix available7.5 High
- ini4j project ini4j, debian linux +1 moreorg.ini4j allows attackers to cause a Denial of Service (DoS)CVE-2022-41404Public exploitFix available7.5 High
- xmldom project xmldom, debian linux +1 moreWithdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldomCVE-2022-37616Fix available9.8 Critical
- debian linux, fedoraproject fedora, xen +2 morelock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call...CVE-2022-33748Fix available5.6 Medium
- debian linux, fedoraproject fedora, xen +2 moreArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing...CVE-2022-33747Fix available3.8 Low
- debian linux, fedoraproject fedora, xen +2 moreP2M pool freeing may take excessively long The P2M pool backing second level address translation...CVE-2022-33746Fix available6.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreMacro URL arbitrary script executionCVE-2022-3140Fix available6.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel IPv4 fib_semantics.c fib_nh_match out-of-boundsCVE-2022-3435Fix available4.3 Medium
- hsqldb hypersql database, hypersql database hsqldb, debian linux +2 moreRemote code execution in HyperSQL DataBaseCVE-2022-41853Public exploitFix available8.0 High
- nodejs node, node.js, debian linux +1 more +3 moreA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...CVE-2022-35255Fix available9.1 Critical
- isc dhcp, debian linux, fedoraproject fedora +2 moreDHCP memory leakCVE-2022-2929Fix available6.5 Medium
- isc dhcp, debian linux, fedoraproject fedora +2 moreAn option refcount overflow exists in dhcpdCVE-2022-2928Fix available6.5 Medium
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...CVE-2022-40617Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +1 more +3 moreUncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +1 more +3 moreUncontrolled Resource Consumption in Jackson-databindCVE-2022-42003Fix available7.5 High
- llhttp, nodejs node, debian linux +2 more +4 moreThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...CVE-2022-35256Fix available6.5 Medium
- google android, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to...CVE-2022-20422Fix available7.0 High
- google android, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use...CVE-2022-20421Public exploitFix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreroccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race...CVE-2022-41850Fix available4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and...CVE-2022-41849Fix available4.2 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3352Fix available7.8 High
- php, debian linux, fedoraproject fedora +2 more$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesCVE-2022-31629Public exploitFix availableEPSS 49.6%6.5 Medium
- php, debian linux, fedoraproject fedora +2 morephar wrapper can occur dos when using quine gzip fileCVE-2022-31628Fix available2.3 Low
- ovs, cloudbase open vswitch, debian linux +2 moreovs - buffer over-readCVE-2022-32166Fix available6.1 Medium
- symfony twig, debian linux, drupal +1 more +3 moreTwig may load a template outside a configured directory when using the filesystem loaderCVE-2022-39261Fix available7.5 High
- apache tomcat, debian linux +1 moreApache Tomcat: Information disclosureCVE-2021-43980Fix available3.7 Low
- vim, vim vim/vim, debian linux +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-3324Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It...CVE-2022-3303Fix available4.7 Medium
- joblib project joblib, debian linux, fedoraproject fedora +2 moreArbitrary Code ExecutionCVE-2022-21797Fix available7.3 High
- nic knot resolver, debian linux, fedoraproject fedora +2 moreKnot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)...CVE-2022-40188Fix available7.5 High
- apache batik, apache software foundation xml graphics, debian linux +2 moreJar url should be blocked by DefaultScriptSecurityCVE-2022-40146Public exploitFix available7.5 High
- apache batik, apache software foundation xml graphics, debian linux +2 morePDFTranscoder does not block external resourcesCVE-2022-38648Fix available5.3 Medium
- apache batik, apache software foundation xml graphics, debian linux +2 moreServer-Side Request Forgery Information Disclosure VulnerabilityCVE-2022-38398Fix available5.3 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vimCVE-2022-3256Fix available7.8 High
- google protobuf-cpp, protobuf-python, debian linux +1 more +3 moreOut of Memory issue in ProtocolBuffers for cpp and pythonCVE-2022-1941Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moremm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an...CVE-2022-41222Fix available7.0 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free...CVE-2022-41218Public exploitFix available5.5 Medium
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leaks in EdDSA DNSSEC verification codeCVE-2022-38178Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leak in ECDSA DNSSEC verification codeCVE-2022-38177Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +1 more +3 moreProcessing large delegations may severely degrade resolver performanceCVE-2022-2795Fix available5.3 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte rangeCVE-2022-39958Fix available7.5 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept headerCVE-2022-39957Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding headerCVE-2022-39956Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type headerCVE-2022-39955Fix available7.3 High
- apple ios, ipados, safari +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in...CVE-2022-32886Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moredrivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive...CVE-2022-40768Fix available5.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3235Fix available7.8 High
- Show moreLoading…