Skip to contentDebian vulnerabilities
Newest
- rubyonrails active storage, debian linux, rails https://github.com/rails/rails +2 morePossible code injection vulnerability in Rails / Active StorageCVE-2022-21831Public exploitFix available9.8 Critical
- arm cortex-a57 firmware, cortex-a65 firmware, cortex-a65ae firmware +19 more +21 moreCertain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache...CVE-2022-23960Fix available5.6 Medium
- rust-lang regex, debian linux, fedoraproject fedora +2 moreRegular expression denial of service in Rust's regex crateCVE-2022-24713Public exploitFix availableEPSS 14.5%7.5 High
- spip, debian linux +1 moreSPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about...CVE-2022-26847Fix available5.3 Medium
- spip, debian linux +1 moreSPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary...CVE-2022-26846Fix available8.8 High
- tryton proteus, trytond, debian linux +2 moreImproper Restriction of XML External Entity Reference in trytond and proteusCVE-2022-26661Fix available6.5 Medium
- tryton proteus, trytond, debian linux +2 moreXML Entity Expansion in trytond and proteusCVE-2022-26662Fix available7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreReachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via...CVE-2022-0865Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 morest21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5...CVE-2022-26490Fix available7.8 High
- readymedia project readymedia, debian linux +1 moreA DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server...CVE-2022-26505Fix available7.4 High
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a...CVE-2022-26496Fix available9.8 Critical
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer...CVE-2022-26495Fix available9.8 Critical
- golang go, debian linux, netapp astra trident +2 moreregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...CVE-2022-24921Fix available7.5 High
- twisted, debian linux, fedoraproject fedora +2 more +4 moreBuffer Overflow in TwistedCVE-2022-21716Fix available7.5 High
- cacti, debian linux, fedoraproject fedora +2 moreUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.CVE-2022-0730Fix available9.8 Critical
- containerd, debian linux, fedoraproject fedora +2 moreInsecure handling of image volumes in containerd CRI pluginCVE-2022-23648Public exploitFix availableEPSS 27.4%7.5 High
- haproxy, debian linux, redhat enterprise linux +2 more +4 moreA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....CVE-2022-0711Fix availableEPSS 16.6%7.5 High
- scrapy, scrapy scrapy/scrapy, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapyCVE-2022-0577Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in...CVE-2022-0516Fix available7.8 High
- image processing project processing, janko image processing, debian linux +2 moreImproper Input Validation in image_processingCVE-2022-24720Fix available9.8 Critical
- google android, debian linux +1 moreProduct: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernelCVE-2021-39713Fix available7.0 High
- xmlsoft libxml2, apple ipados, iphone os +36 more +38 morevalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Fix available7.5 High
- blender, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds...CVE-2022-0546Fix available7.8 High
- blender, debian linux +1 moreAn integer overflow in the processing of loaded 2D images leads to a write-what-where...CVE-2022-0545Fix available7.8 High
- blender, debian linux +1 moreAn integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly...CVE-2022-0544Fix available5.5 Medium
- usbguard project usbguard, debian linux, fedoraproject fedora +2 moreAn issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon...CVE-2019-25058Fix available7.8 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in...CVE-2021-3596Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0729Fix available7.8 High
- cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 moreIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...CVE-2022-24407Fix available8.8 High
- debian linux, linux kernel, netapp h300e +10 more +12 morenet/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain...CVE-2022-25636Public exploitFix available7.8 High
- audiofile, debian linux, fedoraproject fedora +2 moreIn autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo...CVE-2022-24599Fix available6.5 Medium
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 moreUse after free in PJSIPCVE-2022-23608Fix available8.1 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0714Fix availableEPSS 12.7%8.4 High
- vim, vim vim/vim, apple macos +2 more +4 moreNULL Pointer Dereference in vim/vimCVE-2022-0696Fix available6.2 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10...CVE-2022-25375Public exploitFix available5.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0685Fix available8.4 High
- debian duckduck before 0.10 did not properly handle loading of untrusted code from the current directory.CVE-2016-1239Fix available9.8 Critical
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...CVE-2021-3657Fix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.CVE-2022-25314Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.CVE-2022-25315Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...CVE-2022-25313Public exploitFix available6.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow...CVE-2022-0585Fix available4.3 Medium
- debian redis, redis debian-specific redis servers +1 moreIt was discovered, that redis, a persistent key-value database, due to a packaging issue, is...CVE-2022-0543In KEVPublic exploitFix availableEPSS 99.4%10.0 Critical
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-0629Fix available8.4 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23804Fix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23803Fix available7.8 High
- debian linux, linux kernel +1 moreA flaw null pointer dereference in the Linux kernel UDF file system functionality was found in...CVE-2022-0617Fix available5.5 Medium
- postgresql jdbc driver, debian linux +1 morepgjdbc Arbitrary File Write VulnerabilityCVE-2022-26520Fix availableDisputed9.8 Critical
- Show moreLoading…