Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 moremisc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq errorCVE-2025-23140Fix available5.5 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- redis, debian linux, lfprojects valkey +2 moreRedis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientCVE-2025-21605Fix available7.5 High
- imagemagick, debian linux +1 moreIn MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after...CVE-2025-43965Fix available2.9 Low
- debian linux, linux kernel +1 morenet_sched: skbprio: Remove overly strict queue assertionsCVE-2025-38637Fix available5.5 Medium
- debian linux, linux kernel +1 moreksmbd: use aead_request_free to match aead_request_allocCVE-2025-38575Fix available5.5 Medium
- pgbouncer, debian linux +1 morePgBouncer default auth_query does not take Postgres password expiry into accountCVE-2025-2291Fix available8.1 High
- debian linux, linux kernel +1 morewatch_queue: fix pipe accounting mismatchCVE-2025-23138Fix available5.5 Medium
- debian linux, linux kernel +1 morewifi: cfg80211: init wiphy_work before allocating rfkill failsCVE-2025-22119Fix available5.5 Medium
- debian linux, linux kernel +1 moreksmbd: add bounds check for create lease contextCVE-2025-22042Fix available8.1 High
- debian linux, linux kernel +1 moreksmbd: fix session use-after-free in multichannel connectionCVE-2025-22040Fix available8.8 High
- erlang erlang/otp, otp, cisco cloud native broadband network gateway +22 more +24 moreErlang/OTP SSH Vulnerable to Pre-Authentication RCECVE-2025-32433In KEVPublic exploitFix availableEPSS 98.9%10.0 Critical
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...CVE-2025-32728Fix available4.3 Medium
- libvips, debian linux +1 morelibvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF outputCVE-2025-29769Fix available8.5 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- debian linux, linux kernel +1 moredrivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctlCVE-2025-21950Fix available7.1 High
- containerd, debian linux +1 morecontainerd has an integer overflow in User ID handlingCVE-2024-40635Public exploitFix available4.6 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: allow exp not to be removed in nf_ct_find_expectationCVE-2023-52927Public exploitFix available7.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions....CVE-2025-24201In KEVPublic exploitFix available10.0 Critical
- freetype, debian linux +1 moreAn out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font...CVE-2025-27363In KEVPublic exploitFix availableEPSS 27.8%8.1 High
- apache tomcat, debian linux, netapp bootstrap os +2 moreApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUTCVE-2025-24813In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel +1 morestaging: media: max96712: fix kernel oops when removing moduleCVE-2024-58054Fix available7.1 High
- djangoproject django, debian linux +1 moreDjango Vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2025-26699Fix available5.0 Medium
- pallets jinja, debian linux +1 moreJinja sandbox breakout through attr filter selecting format methodCVE-2025-27516Fix available5.4 Medium
- libreoffice, debian linux +1 moreMacro URL arbitrary script executionCVE-2025-1080Fix available7.2 High
- adacore ada web server, debian linux +1 moreWhen AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is...CVE-2024-55581Fix available7.4 High
- abseil abseil-cpp, common libraries, debian linux +2 moreHeap Buffer overflow in AbseilCVE-2025-0838Fix available5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- offis dcmtk, debian linux +1 moreA NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows...CVE-2025-25475Fix available7.5 High
- offis dcmtk, debian linux +1 moreDCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.CVE-2025-25474Fix available6.5 Medium
- offis dcmtk, debian linux +1 moreA buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service ...CVE-2025-25472Fix available5.3 Medium
- ffmpeg, debian linux +1 moreFFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the...CVE-2025-22921Fix available6.5 Medium
- f5 nginx, debian linux, f5 nginx open source +1 more +3 moreTLS Session Resumption VulnerabilityCVE-2025-23419Public exploitFix available5.3 Medium
- flightgear simgear, debian linux +1 moreIncorrect Authorization in SimGearCVE-2025-0781Fix available8.6 High
- oracle graalvm, graalvm for jdk, jdk +9 more +11 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2025-21502Fix available4.8 Medium
- oracle mysql server, debian linux +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2025-21490Fix available4.9 Medium
- debian linux, netapp 500f firmware, 8300 firmware +27 more +29 moreTiming side-channel in ECDSA signature computationCVE-2024-13176Public exploitFix available4.6 Medium
- git, debian linux +1 moreNewline confusion in credential helpers can lead to credential exfiltration in gitCVE-2024-52006Fix available2.1 Low
- git, debian linux +1 moreGit does not sanitize URLs when asking for credentials interactivelyCVE-2024-50349Fix available2.1 Low
- djangoproject django, debian linux +1 moreDjango has a potential denial-of-service vulnerability in IPv6 validationCVE-2024-56374Fix available5.8 Medium
- libreoffice, debian linux +1 moreURL fetching can be used to exfiltrate arbitrary INI file values and environment variablesCVE-2024-12426Fix available6.7 Medium
- libreoffice, debian linux +1 morePath traversal leading to arbitrary .ttf file writeCVE-2024-12425Fix available2.4 Low
- redis, debian linux +1 moreRedis' Lua library commands may lead to remote code executionCVE-2024-46981Public exploitFix available7.0 High
- debian linux, linux kernel +1 moremedia: atomisp: Add check for rgby_data memory allocation failureCVE-2024-56705Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenet/ipv6: release expired exception dst cached in socketCVE-2024-56644Fix available7.5 High
- debian linux, linux kernel +1 moreALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesCVE-2024-53197In KEVFix available7.8 High
- debian linux, linux kernel +1 moreALSA: usb-audio: Fix out of bounds reads when finding clock sourcesCVE-2024-53150In KEVFix available7.1 High
- gstreamer, debian linux +1 moreGHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writesCVE-2024-47606Fix available8.6 High
- apache subversion, debian linux +1 moreApache Subversion: mod_dav_svn denial-of-service via control characters in pathsCVE-2024-46901Fix available3.1 Low
- Show moreLoading…