Skip to contentDebian Linux vulnerabilities
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to cause the use of a MessagePort after it had already been freed, which could...CVE-2023-6205Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreOn some systems—depending on the graphics settings and drivers—it was possible to force an out-of...CVE-2023-6204Fix available6.5 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- wireshark, debian linux +1 moreOut-of-bounds Read in WiresharkCVE-2023-6174Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker...CVE-2023-6112Fix availableEPSS 24.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote...CVE-2023-5997Fix available8.8 High
- debian linux, intel core i3-1005g1 firmware, core i3-10100y firmware +220 more +222 moreSequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may...CVE-2023-23583Public exploitFix available8.8 High
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUse after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory...CVE-2023-46850Fix available9.8 Critical
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUsing the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows...CVE-2023-46849Fix available7.5 High
- sensiolabs symfony, debian linux, symfony twig-bridge +2 moreSymfony potential Cross-site Scripting vulnerabilities in CodeExtension filtersCVE-2023-46734Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to...CVE-2023-5996Fix available8.8 High
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content...CVE-2023-47272Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5859Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed...CVE-2023-5858Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5857Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5856Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker...CVE-2023-5855Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5854Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5853Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who...CVE-2023-5852Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5851Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5850Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to...CVE-2023-5849Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote...CVE-2023-5482Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a...CVE-2023-5480Fix available6.1 Medium
- apache activemq, activemq legacy openwire module, debian linux +3 more +5 moreApache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attackCVE-2023-46604In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- browserify browserify-sign, debian linux +1 morebrowserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attackCVE-2023-46234Fix available6.5 Medium
- microsoft open-vm-tools, debian linux, vmware open vm tools +2 moreopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A...CVE-2023-34059Fix available7.4 High
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...CVE-2023-34058Fix available7.1 High
- apple ipados, macos, safari +6 more +8 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...CVE-2023-42852Fix available8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...CVE-2023-41983Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...CVE-2023-5472Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +6 more +8 moreXorg-x11-server: use-after-free bug in destroywindowCVE-2023-5380Fix available4.7 Medium
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAddress bar spoofing via bidirectional charactersCVE-2023-5732Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...CVE-2023-5730Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring garbage collection extra operations were performed on a object that should not be. This...CVE-2023-5728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...CVE-2023-5725Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...CVE-2023-5724Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2023-5721Fix available4.3 Medium
- openssl, debian linux, netapp h300s firmware +9 more +11 moreIncorrect cipher key & IV length processingCVE-2023-5363Fix available7.5 High
- buc traceroute, debian linux +1 moreIn buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse...CVE-2023-46316Fix available5.5 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: mod_macro buffer over-readCVE-2023-31122Fix available7.5 High
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTCVE-2023-45802Public exploitFix available5.9 Medium
- redis, debian linux, fedoraproject fedora +2 moreRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.CVE-2023-45145Fix available3.6 Low
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 moreStored XSS vulnerability in RoundcubeCVE-2023-5631In KEVFix availableEPSS 76.3%6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...CVE-2023-5388Fix available6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreAn issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the...CVE-2023-45871Fix available7.5 High
- babel, babeljs babel-plugin-polyfill-corejs2, babel-plugin-polyfill-corejs3 +6 more +8 moreBabel vulnerable to arbitrary code execution when compiling specifically crafted malicious codeCVE-2023-45133Fix available9.4 Critical
- google chrome, debian linux +1 moreInappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5486Fix available4.3 Medium
- Show moreLoading…