Skip to contentDebian vulnerabilities
Newest
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows...CVE-2022-1355Fix available6.1 Medium
- guzzle, debian linux, drupal +2 moreCross-domain cookie leakage in GuzzleCVE-2022-29248Fix available8.0 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Read in vim/vimCVE-2022-1851Fix available7.8 High
- debian dpkg, linux, netapp ontap select deploy administration utility +2 moredirectory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tarCVE-2022-1664Fix available9.8 Critical
- debian linux, oracle vm +1 moreKGDB and KDB allow read and write access to kernel memory, and thus should be restricted during...CVE-2022-21499Fix available6.7 Medium
- smarty, debian linux, fedoraproject fedora +2 morePHP Code Injection by malicious block or filename in SmartyCVE-2022-29221Public exploitFix available8.8 High
- apache software foundation maven, apache maven shared utils, debian linux +2 moreCommandline class shell injection vulnerabilitiesCVE-2022-29599Fix available9.8 Critical
- vim, vim vim/vim, debian linux +2 moreOut-of-bounds Write in vim/vimCVE-2022-1785Fix available7.3 High
- debian linux, linux kernel, netapp h300e firmware +7 more +9 moreA flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can...CVE-2022-1734Fix available7.0 High
- artifex mujs, debian linux, fedoraproject fedora +2 moreIn Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as...CVE-2022-30975Fix available5.5 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 morecompile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...CVE-2022-30974Fix available5.5 Medium
- needrestart project needrestart, debian linux +1 moreneedrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect...CVE-2022-30688Fix available7.8 High
- pidgin, debian linux +1 moreAn issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses...CVE-2022-26491Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...CVE-2022-29581Public exploitFix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreBuffer Over-read in function grab_file_name in vim/vimCVE-2022-1720Fix available6.6 Medium
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way...CVE-2022-1679Public exploitFix available7.8 High
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...CVE-2022-1586Fix available9.1 Critical
- debian linux, intel celeron j1750 firmware, celeron j1800 firmware +396 more +398 moreProcessor optimization removal or modification of security-critical code for some Intel(R)...CVE-2022-21151Fix available5.5 Medium
- debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...CVE-2022-30594Public exploitFix available7.8 High
- apache tomcat, debian linux, oracle hospitality cruise shipboard property management system +2 moreEncryptInterceptor does not provide complete protection on insecure networksCVE-2022-29885Public exploitFix availableEPSS 73.5%7.5 High
- eventsource, eventsource eventsource/eventsource, debian linux +2 moreImproper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsourceCVE-2022-1650Fix available8.1 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...CVE-2022-27782Fix available7.5 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing...CVE-2022-1623Fix available5.5 Medium
- dogtag jss, debian linux, dogtagpki network security services for java +1 more +3 moreA flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted...CVE-2021-4213Fix available7.5 High
- htmldoc project htmldoc, debian linux +1 moreThere is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls...CVE-2022-27114Fix available5.5 Medium
- debian linux, rarlab unrar +1 moreRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an...CVE-2022-30333In KEVPublic exploitFix availableEPSS 99.2%7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap buffer overflow in vim_strncpy find_word in vim/vimCVE-2022-1621Fix available7.3 High
- admesh project admesh, debian linux +1 moreOut-of-bounds read in admeshCVE-2018-25033Fix available8.1 High
- imagemagick, debian linux +1 moreImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.CVE-2022-28463Fix available7.8 High
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619Fix available6.1 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse after free in append_command in vim/vimCVE-2022-1616Fix available7.3 High
- webkitgtk, debian linux +1 moreIn WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore:...CVE-2022-30293Fix available7.5 High
- ecdsautils project ecdsautils, debian linux, fedoraproject fedora +2 moreTrivial signature forgery in ecdsautilsCVE-2022-24884Fix available10.0 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 moreA logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...CVE-2022-27337Fix available6.5 Medium
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information...CVE-2022-29500Fix available8.8 High
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of...CVE-2022-29501Fix available8.8 High
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslogCVE-2022-24903Public exploitFix available8.1 High
- openldap, debian linux, netapp h300s firmware +8 more +10 moreIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...CVE-2022-29155Fix availableEPSS 64.5%9.8 Critical
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20796Fix available6.5 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022CVE-2022-20785Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20771Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20770Fix available8.6 High
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42529Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42531Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42530Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionCVE-2021-42532Fix available7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit Null Pointer Dereference Application denial-of-serviceCVE-2021-42528Fix available5.5 Medium
- Show moreLoading…