Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Debian

Debian vulnerabilities

Products

Linux10,019
Advanced Package Tool21
Dpkg15
Pdns14
Apt8
Shadow8
Lintian6
Devscripts3
Freedombox3
Horde3
Icoutils3
Reportbug3
Apt-cacher2
Aptlinex2
Cifs-utils2
Debusine2
Dpkg-dev2
Fsp2
Horde Groupware2
Mime-support2
Netkit2
Netqmail2
Python-apt2
Python-dns2
Qpopper2
Xsabre2
Yubiserver2

Newest

Known exploitedIn KEVPublic exploitFix available

debian linux, tuxera ntfs-3g, fedoraproject fedora +2 morentfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2....CVE-2021-46790Fix available7.8 HighMay 2, 2022
sinatrarb sinatra, debian linux +1 moresinatra does not validate expanded path matchesCVE-2022-29970Fix available7.5 HighMay 2, 2022
debian linux, linux kernel +1 moreA NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network...CVE-2022-1516Fix available5.5 MediumMay 2, 2022
debian linux, linux kernel +1 moreThe root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease...CVE-2022-1419Fix available7.8 HighMay 2, 2022
google gson, debian linux, netapp active iq unified manager +3 more +5 moreDeserialization of Untrusted DataCVE-2022-25647Fix availableEPSS 11.6%7.7 HighMay 1, 2022
qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the QXL display device emulation in QEMU. An integer overflow in the...CVE-2021-4206Fix available8.2 HighApril 29, 2022
qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled...CVE-2021-4207Fix available8.2 HighApril 29, 2022
debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel....CVE-2022-1353Fix available7.1 HighApril 28, 2022
samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...CVE-2022-29869Fix available5.3 MediumApril 28, 2022
debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 moreXSS Vulnerability in Action View tag helpersCVE-2022-27777Fix available6.1 MediumApril 27, 2022
debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 moreCross-site Scripting Vulnerability in Action PackCVE-2022-22577Fix available6.1 MediumApril 27, 2022
haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 MediumApril 27, 2022
haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...CVE-2022-27775Fix available7.5 HighApril 27, 2022
haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 MediumApril 27, 2022
haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 HighApril 27, 2022
samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...CVE-2022-27239Fix available7.8 HighApril 27, 2022
artifex ghostscript, debian linux +1 moreArtifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an...CVE-2019-25059Fix available7.8 HighApril 25, 2022
teluu pjsip, debian linux, pjsip pjproject +2 morePotential infinite loop when parsing WAV format file in PJSIPCVE-2022-24792Fix available7.5 HighApril 25, 2022
gpac, debian linux +1 moreMP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion....CVE-2022-1441Fix available7.8 HighApril 25, 2022
debian linux, linux kernel +1 moreIn the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in...CVE-2022-29582Public exploitFix available7.0 HighApril 22, 2022
gnome epiphany, debian linux, fedoraproject fedora +2 moreIn GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer...CVE-2022-29536Fix available7.5 HighApril 20, 2022
graphicsmagick, debian linux +1 moreIn GraphicsMagick, a heap buffer overflow was found when parsing MIFF.CVE-2022-1270Fix available7.8 HighApril 20, 2022
oracle graalvm, java se, azul zulu +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21496Fix available5.3 MediumApril 19, 2022
oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21476Fix available7.5 HighApril 19, 2022
oracle graalvm, azul zulu, debian linux +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21449Public exploitFix availableEPSS 77.2%7.5 HighApril 19, 2022
oracle graalvm, java se, azul zulu +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21443Fix available3.7 LowApril 19, 2022
oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21434Fix available5.3 MediumApril 19, 2022
oracle mysql, oracle corporation mysql server, debian linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported...CVE-2022-21427Fix available4.9 MediumApril 19, 2022
oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21426Fix available5.3 MediumApril 19, 2022
git, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreCommand InjectionCVE-2022-25648Fix available8.1 HighApril 19, 2022
dcraw project dcraw, debian linux +1 moreThere is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a...CVE-2021-3624Fix available7.8 HighApril 18, 2022
mediawiki, debian linux +1 moreA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...CVE-2022-28203Fix available7.5 HighApril 18, 2022
mediawiki, debian linux +1 moreAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...CVE-2022-28201Fix available4.4 MediumApril 18, 2022
invisible-island ncurses, apple macos, debian linux +2 morencurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in...CVE-2022-29458Fix available7.1 HighApril 18, 2022
py-pdf pypdf2, debian linux +1 moreManipulated inline images can cause Infinite Loop in PyPDF2CVE-2022-24859Fix available6.2 MediumApril 18, 2022
ruby-lang ruby, apple macos, debian linux +2 moreThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...CVE-2022-28739Fix available7.5 HighApril 15, 2022
ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreStored XSS and path traversal in LDAPAccountManager/lamCVE-2022-24851Fix available8.1 HighApril 15, 2022
irzip project irzip, debian linux +1 moreIrzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c...CVE-2022-28044Fix available9.8 CriticalApril 15, 2022
debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function...CVE-2022-28042Fix available8.8 HighApril 15, 2022
debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an integer overflow via the function...CVE-2022-28041Fix available6.5 MediumApril 15, 2022
digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The...CVE-2022-26651Fix available9.8 CriticalApril 15, 2022
digium asterisk, debian linux +1 moreAn SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to...CVE-2022-26499Fix available9.1 CriticalApril 15, 2022
digium asterisk, debian linux +1 moreAn issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to...CVE-2022-26498Fix availableEPSS 16.5%7.5 HighApril 15, 2022
mariadb, debian linux +1 moreMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...CVE-2022-27456Fix available7.5 HighApril 14, 2022
mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...CVE-2022-27452Fix available7.5 HighApril 14, 2022
mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...CVE-2022-27449Fix available7.5 HighApril 14, 2022
mariadb, debian linux +1 moreThere is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos ==...CVE-2022-27448Fix available7.5 HighApril 14, 2022
mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a use-after-free via the component...CVE-2022-27447Fix available7.5 HighApril 14, 2022
mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...CVE-2022-27445Fix available7.5 HighApril 14, 2022
mutt, debian linux, fedoraproject fedora +2 moreBuffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3...CVE-2022-1328Fix available4.3 MediumApril 14, 2022
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open