Skip to contentDebian vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4058Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who...CVE-2021-4057Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4056Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who...CVE-2021-4055Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote...CVE-2021-4054Fix available6.5 Medium
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4053Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who...CVE-2021-4052Fix available8.8 High
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsCVE-2021-44228In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smugglingCVE-2021-43797Fix available6.5 Medium
- mozilla thunderbird, debian linux +1 moreThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...CVE-2021-43528Fix available6.5 Medium
- debian linux, f5 nginx, fedoraproject fedora +2 more +4 moreALPACA is an application layer protocol content confusion attack, exploiting TLS servers...CVE-2021-3618Fix available7.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...CVE-2021-43546Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing the Location API in a loop could have caused severe application hangs and crashes. This...CVE-2021-43545Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...CVE-2021-43543Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...CVE-2021-43542Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...CVE-2021-43541Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly record the location of live pointers across wasm instance calls resulted in...CVE-2021-43539Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy misusing a race in our notification code, an attacker could have forcefully hidden the...CVE-2021-43538Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...CVE-2021-43537Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...CVE-2021-43536Fix available6.5 Medium
- owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 moreModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects...CVE-2021-42717Public exploitFix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- debian linux, linuxfoundation runc +1 moreOverflow in netlink bytemsg length field allows attacker to override netlink-based container configurationCVE-2021-43784Fix available6.0 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-4069Fix available7.3 High
- gnu mailman, debian linux +1 moreCross Site Request Forgery in mailmanCVE-2021-44227Fix available8.8 High
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...CVE-2021-3930Fix available6.5 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-4019Fix available7.1 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3984Fix available7.3 High
- bluez, debian linux +1 moreA heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any...CVE-2019-8922Fix available8.8 High
- bluez, debian linux +1 moreAn issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the...CVE-2019-8921Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +3 more +5 moreA memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user...CVE-2021-4002Fix available4.4 Medium
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28709Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28708Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28707Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 moreguests may exceed their designated memory limit When a guest is permitted to have close to 16TiB...CVE-2021-28706Fix available8.6 High
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28705Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28704Fix available8.8 High
- google chrome, debian linux +1 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a...CVE-2021-38004Fix available4.3 Medium
- isync project isync, debian linux, fedoraproject fedora +2 moreA flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a...CVE-2021-44143Fix available9.8 Critical
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...CVE-2021-3935Fix available8.1 High
- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functionsCVE-2021-21707Public exploitFix availableEPSS 25.3%5.3 Medium
- gerbv, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability exists in the drill format T-code tool number functionality...CVE-2021-40391Fix available10.0 Critical
- wireshark, debian linux +1 moreNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39923Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3973Fix available7.3 High
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's...CVE-2021-44025Fix available6.1 Medium
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search...CVE-2021-44026In KEVPublic exploitFix availableEPSS 69.9%9.8 Critical
- wireshark, debian linux, fedoraproject fedora +2 moreUncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...CVE-2021-39929Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39926Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39925Fix available7.5 High
- Show moreLoading…