Skip to contentDebian vulnerabilities
Newest
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPressCVE-2022-21661Public exploitFix availableEPSS 97.8%8.0 High
- lighttpd, debian linux +1 moreIn lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward...CVE-2022-22707Fix available5.9 Medium
- roundcube, debian linux +1 moreRoundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted...CVE-2021-46144Fix available6.1 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46141Fix available5.5 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...CVE-2021-46142Fix available5.5 Medium
- sphinxsearch sphinx, debian linux +1 moreSphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in...CVE-2020-29050Fix available7.5 High
- libsndfile project libsndfile, debian linux +1 moreAn out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is...CVE-2021-4156Fix available7.1 High
- nltk, nltk nltk/nltk, debian linux +1 more +3 moreInefficient Regular Expression Complexity in nltk/nltkCVE-2021-3842Fix available7.5 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreMissing release of locks in PJSIPCVE-2021-41141Fix available5.9 Medium
- giftrans project giftrans, debian linux +1 moreThe giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value...CVE-2021-459727.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- artifex ghostscript, debian linux +1 moreGhostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from...CVE-2021-45944Fix available5.5 Medium
- artifex ghostscript, debian linux +1 moreGhostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish ...CVE-2021-45949Fix available5.5 Medium
- ultrajson project ultrajson, debian linux, fedoraproject fedora +2 moreUltraJSON vulnerable to Out-of-bounds WriteCVE-2021-45958Fix available5.5 Medium
- debian linux, linux kernel +1 moreA vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due...CVE-2021-4149Fix available5.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +5 more +7 moreKernel: security regression for cve-2018-13405CVE-2021-4037Fix available4.4 Medium
- squid-cache squid, debian linux +1 moreImportant: squid:4 security updateCVE-2021-46784Fix available6.5 Medium
- osgeo gdal, debian linux, fedoraproject fedora +1 more +3 moreGDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile ...CVE-2021-45943Fix available5.5 Medium
- openexr, debian linux, fedoraproject fedora +2 moreOpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:...CVE-2021-45942Fix available5.5 Medium
- debian linux, fedoraproject fedora, qt qtsvg +2 moreQt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate...CVE-2021-45930Fix available5.5 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-4197Fix available7.8 High
- vim, vim vim/vim, apple mac os x +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2021-4193Fix available5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 moreUse After Free in vim/vimCVE-2021-4192Fix available5.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...CVE-2021-4185Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows...CVE-2021-4184Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreCrash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...CVE-2021-4181Fix available7.5 High
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...CVE-2021-28715Fix available6.5 Medium
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...CVE-2021-28714Fix available6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...CVE-2021-28713Fix available6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...CVE-2021-28712Fix available6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...CVE-2021-28711Fix available6.5 Medium
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- gif2apng project gif2apng, debian linux +1 moreAn issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in...CVE-2021-45909Fix available7.8 High
- gif2apng project gif2apng, debian linux +1 moreAn issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main...CVE-2021-45910Fix available7.8 High
- gif2apng project gif2apng, debian linux +1 moreAn issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main...CVE-2021-45911Fix available7.8 High
- teluu pjsip, debian linux, pjsip pjproject +2 morePrevent out-of-bounds read in PJSIPCVE-2021-43845Fix available8.2 High
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vimCVE-2021-4166Fix available7.1 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the...CVE-2021-45480Fix available5.5 Medium
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...CVE-2021-31566Fix available7.8 High
- debian linux, fedoraproject fedora, libarchive +10 more +12 moreAn improper link resolution flaw while extracting an archive can lead to changing the access...CVE-2021-23177Fix available7.8 High
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of...CVE-2021-45469Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...CVE-2021-44733Public exploitFix available7.0 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreOut-of-bounds read when parsing RTCP BYE message in PJSIPCVE-2021-43804Fix available7.3 High
- gerbv, debian linux +1 moreAn out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling...CVE-2021-40394Fix available10.0 Critical
- gerbv, debian linux +1 moreAn out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling...CVE-2021-40393Fix available10.0 Critical
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 morePotential integer underflow upon receiving STUN message in PJSIPCVE-2021-37706Fix available7.3 High
- debian linux, linux kernel, netapp h300e firmware +12 more +14 moreA read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain...CVE-2021-4083Fix available7.0 High
- apache http server, apple mac os x, macos +8 more +10 morePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierCVE-2021-44224Fix availableEPSS 82.3%8.2 High
- Show moreLoading…