Skip to contentDebian Linux vulnerabilities
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack Header ParsingCVE-2024-26146Fix available5.3 Medium
- lsegal yard, debian linux, fedoraproject fedora +2 moreYARD's default template vulnerable to Cross-site Scripting in generated frames.htmlCVE-2024-27285Fix available5.4 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted archives or...CVE-2024-25082Public exploitFix available6.5 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted filenames.CVE-2024-25081Public exploitFix available4.2 Medium
- debian linux, linux kernel +1 moreKVM: arm64: vgic-its: Avoid potential UAF in LPI translation cacheCVE-2024-26598Fix available8.8 High
- debian linux, linux kernel +1 moresmb: client: fix potential OOBs in smb2_parse_contexts()CVE-2023-52434Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...CVE-2024-1553Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIncorrect code generation could have led to unexpected numeric conversions and potential...CVE-2024-1552Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...CVE-2024-1551Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious website could have used a combination of exiting fullscreen mode and ...CVE-2024-1550Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf a website set a large custom cursor, portions of the cursor could have overlapped with the...CVE-2024-1549Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a dropdown select input...CVE-2024-1548Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...CVE-2024-1547Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen storing and re-accessing data on a networking channel, the length of buffers may have been...CVE-2024-1546Fix available7.5 High
- debian linux, linux kernel +1 morenetfilter: nft_set_rbtree: skip end interval element from gcCVE-2024-26581Public exploitFix available7.8 High
- debian linux, fedoraproject fedora, redhat enterprise linux +1 more +3 moreThe implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...CVE-2023-52160Public exploitFix available6.5 Medium
- tianocore edk2, canonical lxd, canonical ltd. ubuntu edk ii +1 more +3 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...CVE-2023-48733Fix available6.7 Medium
- debian linux, fedoraproject fedora, openidc mod auth openidc +2 moreDenial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidcCVE-2024-24814Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +5 more +7 moreThe Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is...CVE-2023-50868Public exploitFix availableEPSS 74.3%7.5 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: stack overflow problem in open vswitch kernel module leading to dosCVE-2024-1151Fix available5.5 Medium
- rhonabwy project rhonabwy, debian linux +1 moreIn Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable...CVE-2024-25714Fix available9.8 Critical
- libjwt, bencollins jwt c library, debian linux +2 morelibjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it...CVE-2024-25189Fix available9.8 Critical
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in __nvmet_req_completeCVE-2023-6536Fix available6.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in nvmet_tcp_build_iovecCVE-2023-6356Fix available6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()CVE-2024-24857Fix available4.6 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()CVE-2024-24858Fix available4.6 Medium
- debian linux, linux kernel, fedoraproject fedora +15 more +17 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2024-1086In KEVPublic exploitFix availableEPSS 28.1%7.8 High
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of serviceCVE-2023-52356Public exploitFix available7.5 High
- debian linux, fedoraproject fedora, linux kernel +2 moreLinux: netback processing of zero-length transmit fragmentCVE-2023-46838Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...CVE-2024-0808Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...CVE-2024-0755Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...CVE-2024-0753Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious devtools extension could have been used to escalate privileges. This vulnerability...CVE-2024-0751Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications delay calculation could have made it possible for an attacker to...CVE-2024-0750Fix available8.8 High
- mozilla firefox, thunderbird, debian linux +1 more +3 moreA phishing site could have repurposed an `about:` dialog to show phishing content with an...CVE-2024-0749Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...CVE-2024-0747Fix available6.5 Medium
- debian linux, mozilla firefox, firefox esr +1 more +3 moreA Linux user opening the print preview dialog could have caused the browser to crash. This...CVE-2024-0746Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2024-0742Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...CVE-2024-0741Public exploitFix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: nf_tables: pointer math issue in nft_byteorder_eval()CVE-2024-0607Fix available6.6 Medium
- oracle graalvm, graalvm for jdk, jdk +7 more +9 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-20952Fix available7.4 High
- oracle graalvm, graalvm for jdk, jdk +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-20926Fix available5.9 Medium
- oracle graalvm, graalvm for jdk, jdk +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-20918Fix available7.4 High
- gnu gnutls, debian linux, fedoraproject fedora +10 more +12 moreGnutls: rejects certificate chain with distributed trustCVE-2024-0567Fix available7.5 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 moreXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerCVE-2023-6816Fix available9.8 Critical
- debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 moreKernel: null pointer dereference vulnerability in ida_free in lib/idr.cCVE-2023-6915Fix available6.2 Medium
- debian linux, linux kernel +1 moreAn out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)CVE-2023-6040Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreKernel: aoe: improper reference count leads to use-after-free vulnerabilityCVE-2023-6270Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a...CVE-2023-51782Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has...CVE-2023-51781Fix available7.0 High
- Show moreLoading…