Skip to contentDebian Linux vulnerabilities
- mozilla firefox, debian linux +1 moreBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...CVE-2022-46877Fix available4.3 Medium
- mozilla firefox, debian linux +1 moreAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...CVE-2022-46871Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46344Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46343Fix available8.8 High
- debian linux, fedoraproject fedora, the xorg project xorg-x11-server +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46342Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46341Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the...CVE-2022-46340Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function...CVE-2022-4283Fix available7.8 High
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 morerails-html-sanitizer contains an incomplete fix for an XSS vulnerabilityCVE-2022-23520Fix available6.1 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 morePossible XSS vulnerability with certain configurations of rails-html-sanitizerCVE-2022-23519Fix available7.2 High
- loofah project loofah, rails rails-html-sanitizer, debian linux +1 more +3 moreImproper neutralization of data URIs allows XSS in rails-html-sanitizerCVE-2022-23518Fix available6.1 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 moreInefficient Regular Expression Complexity in rails-html-sanitizerCVE-2022-23517Fix available7.5 High
- flavorjones loofah, debian linux +1 moreImproper neutralization of data URIs may allow XSS in LoofahCVE-2022-23515Fix available6.1 Medium
- jettison project jettison, debian linux +1 moreJettison Out-of-bounds Write vulnerabilityCVE-2022-45693Fix available7.5 High
- jettison project jettison, debian linux +1 moreJettison Out-of-bounds Write vulnerabilityCVE-2022-45685Fix available7.5 High
- netty, debian linux +1 moreNetty vulnerable to HTTP Response splitting from assigning header value iteratorCVE-2022-41915Fix available6.5 Medium
- netty, debian linux +1 moreHAProxyMessageDecoder Stack Exhaustion DoSCVE-2022-41881Fix available5.3 Medium
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdpCVE-2022-23477Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreInteger Overflow in xrdpCVE-2022-23484Fix available8.2 High
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in libxrdpCVE-2022-23483Fix available7.5 High
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in xrdpCVE-2022-23482Fix available0.0 None
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in xrdpCVE-2022-23481Fix available0.0 None
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdpCVE-2022-23480Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow occurs in xrdpCVE-2022-23479Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreOut of Bound Write in xrdpCVE-2022-23478Fix available9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdpCVE-2022-23468Fix available6.5 Medium
- neutrinolabs xrdp, debian linux +1 moreOut of Bound Read in xrdpCVE-2022-23493Fix available9.1 Critical
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to...CVE-2022-42329Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to...CVE-2022-42328Fix available5.5 Medium
- debian linux, linux kernel +1 moreGuests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to...CVE-2022-3643Fix available6.5 Medium
- gitpython-developers gitpython, debian linux, fedoraproject fedora +2 moreRemote Code Execution (RCE)CVE-2022-24439Public exploitFix available8.1 High
- awstats, debian linux, fedoraproject fedora +2 moreAWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:...CVE-2022-46391Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...CVE-2022-4907Fix available8.8 High
- videolan vlc media player, debian linux +1 moreAn integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows...CVE-2022-41325Fix available7.8 High
- apache commons net, debian linux +1 moreApache Commons Net's FTP client trusts the host from PASV response by defaultCVE-2021-37533Fix available6.5 Medium
- g810-led project g810-led, debian linux +1 moreg810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to...CVE-2022-46338Fix available6.5 Medium
- gnu emacs, debian linux, fedoraproject fedora +2 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-45939Fix available7.8 High
- sinatra, debian linux +1 moreSinatra vulnerable to Reflected File Download attackCVE-2022-45442Public exploitFix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth...CVE-2022-45934Public exploitFix available7.8 High
- openjsf express, qs project qs, debian linux +2 moreqs vulnerable to Prototype PollutionCVE-2022-24999Public exploitFix availableEPSS 15.7%7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-4141Fix available7.3 High
- artifex mujs, debian linux, fedoraproject fedora +2 moreA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.1 allows an...CVE-2022-44789Public exploitFix available8.8 High
- pgjdbc, postgresql jdbc driver, debian linux +2 moreTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcCVE-2022-41946Fix available4.7 Medium
- libarchive, debian linux, fedoraproject fedora +1 more +3 moreIn libarchive 3.6.1, the software does not check for an error after calling calloc function that...CVE-2022-36227Fix available9.8 Critical
- linaro lava, debian linux +1 moreIn Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials...CVE-2022-44641Fix available6.5 Medium
- heimdal, debian linux +1 moreRead one byte past a buffer when normalizing UnicodeCVE-2022-41916Fix available5.9 Medium
- nodejs node, node.js, debian linux +2 moreA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...CVE-2022-43548Fix availableEPSS 14.9%8.1 High
- libtiff, apple ipados, iphone os +4 more +6 moreLibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflowCVE-2022-3970Fix available6.3 Medium
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...CVE-2022-45188Fix available7.8 High
- xfce xfce4-settings, debian linux, fedoraproject fedora +2 moreIn Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection...CVE-2022-45062Fix available9.8 Critical
- Show moreLoading…