Skip to contentDebian Linux vulnerabilities
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty's OpenId Revoked authentication allows one requestCVE-2023-41900Fix available3.5 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty accepts "+" prefixed value in Content-LengthCVE-2023-40167Public exploitFix available5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty vulnerable to errant command quoting in CGI ServletCVE-2023-36479Fix available3.5 Low
- rgrove sanitize, debian linux +1 moreSanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element contentCVE-2023-36823Fix available7.1 High
- jgm pandoc, debian linux +1 moreArbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted inputCVE-2023-35936Fix available6.0 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...CVE-2023-37211Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...CVE-2023-37208Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a URL with a scheme handled by...CVE-2023-37207Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...CVE-2023-37202Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...CVE-2023-37201Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreLinux Kernel nftables Out-Of-Bounds Read/Write VulnerabilityCVE-2023-35001Public exploitFix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux Kernel nftables Use-After-Free Local Privilege Escalation VulnerabilityCVE-2023-31248Fix available7.8 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidatorCVE-2023-36053Fix available7.5 High
- debian linux, google android +1 moreIn multiple functions of io_uring.c, there is a possible kernel memory corruption due to...CVE-2023-21400Fix available6.7 Medium
- debian linux, google android +1 moreIn multiple functions of binder.c, there is a possible memory corruption due to a use after free....CVE-2023-21255Fix available7.8 High
- debian linux, linux kernel, fedora +6 more +8 moreCrash due to a null pointer dereference in the dn_nsp_send functionCVE-2023-3338Public exploitFix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreUse after free in io_uring in the Linux KernelCVE-2023-3389Fix available7.8 High
- debian linux, linux kernel +1 moreOut-of-bounds write in Linux kernel's ipvlan network driverCVE-2023-3090Fix available7.8 High
- google chrome, debian linux +1 moreUse after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who...CVE-2023-3422Fix available8.8 High
- google chrome, debian linux +1 moreUse after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to...CVE-2023-3421Fix available8.8 High
- google chrome, debian linux +1 moreType Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to...CVE-2023-3420Fix availableEPSS 56.2%8.8 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 moreArtifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the ...CVE-2023-36664Public exploitFix available7.8 High
- debian linux, openprinting cups, apple macos +1 more +3 moreCUPS vulnerable to use-after-free in cupsdAcceptClient()CVE-2023-34241Fix available5.3 Medium
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0CVE-2023-2911Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceededCVE-2023-2828Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- shibboleth xmltooling, debian linux +1 moreShibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows...CVE-2023-36661Public exploitFix available7.5 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in...CVE-2023-35824Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in...CVE-2023-35823Fix available7.0 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreAn issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before...CVE-2023-35788Public exploitFix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn out of bounds (OOB) memory access flaw was found in the Linux kernel in...CVE-2023-3268Fix available7.1 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: Configuration option to block the PUSH method in ATS didn't workCVE-2023-30631Fix available7.5 High
- apache traffic server, debian linux +1 moreApache Traffic Server: The TRACE method can be use to disclose network informationCVE-2022-47184Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3217Fix availableEPSS 13.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3216Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3215Fix availableEPSS 13.8%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote...CVE-2023-3214Fix available8.8 High
- vmware tools, debian linux, fedoraproject fedora +2 moreVMware Tools Authentication Bypass VulnerabilityCVE-2023-20867In KEVFix availableEPSS 13.6%3.9 Low
- debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 moreA use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in...CVE-2023-3141Fix available7.1 High
- freedesktop dbus, debian linux, fedoraproject fedora +3 more +5 moreD-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged...CVE-2023-34969Fix available6.5 Medium
- wireshark, debian linux +1 moreWireshark RTPS Parsing Buffer OverflowCVE-2023-0666Fix available6.5 Medium
- yajl project yajl, debian linux, fedoraproject fedora +2 moreThere's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of...CVE-2023-33460Fix available6.5 Medium
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to...CVE-2023-3079In KEVPublic exploitFix availableEPSS 37.9%8.8 High
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...CVE-2023-34410Fix available5.3 Medium
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreA use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs...CVE-2023-3111Fix available7.8 High
- openprinting cups, debian linux +1 moreOpenPrinting CUPS vulnerable to heap buffer overflowCVE-2023-32324Fix available7.5 High
- debian linux, linux kernel, suse linux enterprise +2 moreAn issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16...CVE-2023-34256Fix availableDisputed5.5 Medium
- wireshark, debian linux +1 moreWireshark IEEE-C37.118 parsing buffer overflowCVE-2023-0668Fix available6.5 Medium
- imagemagick, debian linux, fedoraproject extra packages for enterprise linux +2 more +4 moreA vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of...CVE-2023-34151Fix available5.5 Medium
- Show moreLoading…