Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Debian

Debian vulnerabilities

Products

Linux10,019
Advanced Package Tool21
Dpkg15
Pdns14
Apt8
Shadow8
Lintian6
Devscripts3
Freedombox3
Horde3
Icoutils3
Reportbug3
Apt-cacher2
Aptlinex2
Cifs-utils2
Debusine2
Dpkg-dev2
Fsp2
Horde Groupware2
Mime-support2
Netkit2
Netqmail2
Python-apt2
Python-dns2
Qpopper2
Xsabre2
Yubiserver2

Newest

Known exploitedIn KEVPublic exploitFix available

apache traffic server, debian linux +1 moreNot validating origin TLS certificateCVE-2021-38161Fix available8.1 HighNovember 3, 2021
apache traffic server, debian linux +1 moreRequest Smuggling - multiple attacksCVE-2021-37149Fix available7.5 HighNovember 3, 2021
apache traffic server, debian linux +1 moreRequest Smuggling - transfer encoding validationCVE-2021-37148Fix available7.5 HighNovember 3, 2021
apache traffic server, debian linux +1 moreRequest Smuggling - LF line endingCVE-2021-37147Fix available7.5 HighNovember 3, 2021
mozilla firefox, firefox esr, thunderbird +1 more +3 moreDue to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with...CVE-2021-38509Fix available4.3 MediumNovember 3, 2021
mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy displaying a form validity message in the correct location at the same time as a permission...CVE-2021-38508Fix available4.3 MediumNovember 3, 2021
mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently...CVE-2021-38507Fix available6.5 MediumNovember 3, 2021
mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of navigations, Firefox could have entered fullscreen mode without notification...CVE-2021-38506Fix available4.3 MediumNovember 3, 2021
mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen interacting with an HTML input element's file picker dialog with webkitdirectory set, a use...CVE-2021-38504Fix available8.8 HighNovember 3, 2021
mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to...CVE-2021-38503Fix available10.0 CriticalNovember 3, 2021
gnome glib, debian linux, netapp active iq unified manager +2 moreA flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...CVE-2021-3800Fix available5.5 MediumNovember 2, 2021
android kernel, google android, debian linux +2 moreIn unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition....CVE-2021-0920In KEVFix available6.4 MediumNovember 1, 2021
vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3903Fix available7.3 HighOctober 27, 2021
isc bind, debian linux, fedoraproject fedora +13 more +15 moreLame cache can be abused to severely degrade resolver performanceCVE-2021-25219Fix availableEPSS 11.2%5.3 MediumOctober 27, 2021
google chrome, debian linux +1 moreInsufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54...CVE-2021-37996Fix available5.5 MediumOctober 26, 2021
google chrome, debian linux +1 moreInappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a...CVE-2021-37995Fix available6.5 MediumOctober 26, 2021
google chrome, debian linux +1 moreInappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a...CVE-2021-37994Fix available6.5 MediumOctober 26, 2021
google chrome, debian linux +1 moreUse after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote...CVE-2021-37993Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreOut of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker...CVE-2021-37992Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreRace in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially...CVE-2021-37991Fix available7.5 HighOctober 26, 2021
google chrome, debian linux +1 moreInappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed...CVE-2021-37990Fix available5.5 MediumOctober 26, 2021
google chrome, debian linux +1 moreInappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote...CVE-2021-37989Fix available6.5 MediumOctober 26, 2021
google chrome, debian linux +1 moreUse after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who...CVE-2021-37988Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreUse after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker...CVE-2021-37987Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreHeap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker...CVE-2021-37986Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreUse after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had...CVE-2021-37985Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreHeap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker...CVE-2021-37984Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreUse after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to...CVE-2021-37983Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreUse after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to...CVE-2021-37982Fix available8.8 HighOctober 26, 2021
google chrome, debian linux +1 moreHeap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who...CVE-2021-37981Fix available9.6 CriticalOctober 26, 2021
jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 moreXSS in `*Text` options of the Datepicker widgetCVE-2021-41183Fix available6.5 MediumOctober 26, 2021
jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 moreXSS in the `altField` option of the Datepicker widgetCVE-2021-41182Public exploitFix availableEPSS 39.4%6.5 MediumOctober 26, 2021
debian linux, linux kernel, fedoraproject fedora +8 more +10 moreA flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to...CVE-2021-3760Fix available7.8 HighOctober 26, 2021
debian linux, fedoraproject fedora, nothings stb image.h +2 moreAn issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end...CVE-2021-42715Fix available5.5 MediumOctober 21, 2021
gnu mailman, debian linux +1 moreGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not...CVE-2021-42097Fix available8.0 HighOctober 21, 2021
gnu mailman, debian linux +1 moreGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is...CVE-2021-42096Fix available4.3 MediumOctober 21, 2021
php, debian linux, fedoraproject fedora +2 more +4 morePHP-FPM memory access in root process leading to privilege escalationCVE-2021-21703Fix available7.8 HighOctober 21, 2021
pocoo babel, debian linux +1 moreDirectory Traversal in BabelCVE-2021-42771Fix available7.8 HighOctober 20, 2021
webkitgtk, wpewebkit wpe webkit, debian linux +1 more +3 moreBubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass...CVE-2021-42762Fix available5.3 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35603Fix available3.7 LowOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35588Fix available3.1 LowOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35586Fix available5.3 MediumOctober 20, 2021
oracle graalvm, graalvm enterprise edition, java se +14 more +16 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35578Fix available5.3 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +14 more +16 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35567Fix available6.8 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35565Fix available5.3 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35564Fix available5.3 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35561Fix available5.3 MediumOctober 20, 2021
oracle graalvm, java se, debian linux +15 more +17 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35559Fix availableEPSS 15.9%5.3 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +12 more +14 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35556Fix available5.3 MediumOctober 20, 2021
oracle graalvm, debian linux, fedoraproject fedora +11 more +13 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-35550Fix available5.9 MediumOctober 20, 2021
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open