Skip to contentDebian vulnerabilities
Newest
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper input validation on HTTP/2 headersCVE-2022-25763Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreHTTP/2 framing vulnerabilitiesCVE-2022-31780Fix available7.5 High
- apache traffic server, debian linux +1 moreTransfer-Encoding not treated as hop-by-hopCVE-2022-31778Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreInsufficient Validation of HTTP/1.x HeadersCVE-2022-28129Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreProtocol vs scheme mismatchCVE-2021-37150Fix available7.5 High
- exim, debian linux +1 moreExim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host...CVE-2022-37452Fix available9.8 Critical
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- djangoproject django, debian linux +1 moreDjango vulnerable to Reflected File Download attackCVE-2022-36359Fix available8.8 High
- pgjdbc, postgresql jdbc driver, debian linux +1 more +3 moreSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcCVE-2022-31197Fix available7.1 High
- intel connman, debian linux +1 moreIn ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to...CVE-2022-32293Fix available8.1 High
- intel connman, debian linux +1 moreIn ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are...CVE-2022-32292Fix available9.8 Critical
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...CVE-2022-2509Fix available7.5 High
- vim, vim vim/vim, debian linux +2 moreOut-of-bounds Write to API in vim/vimCVE-2022-2598Fix available6.5 Medium
- google android, debian linux +1 moreIn v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper...CVE-2022-20369Fix available6.7 Medium
- debian linux, fedoraproject fedora, libtiff +2 more +4 moreA stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This...CVE-2022-34526Fix available6.5 Medium
- horde groupware, debian linux +1 moreHorde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which...CVE-2022-30287Fix availableEPSS 69.4%8.0 High
- clusterlabs booth, debian linux, fedoraproject fedora +2 moreThe authfile directive in the booth config file is ignored, preventing use of authentication in...CVE-2022-2553Fix available6.5 Medium
- debian linux, linux kernel, netapp a700s firmware +22 more +24 moreAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...CVE-2022-36879Fix available5.5 Medium
- debian linux, linux kernel, netapp active iq unified manager +6 more +8 morenfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote...CVE-2022-36946Public exploitFix available7.5 High
- xen, debian linux, fedoraproject fedora +2 moreinsufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...CVE-2022-33745Fix available8.8 High
- libreoffice, debian linux +1 moreWeak Master KeysCVE-2022-26307Fix available8.8 High
- libreoffice, debian linux +1 moreExecution of Untrusted Macros Due to Improper Certificate ValidationCVE-2022-26306Fix available7.5 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...CVE-2021-46829Fix available7.8 High
- mod wsgi wsgi, debian linux, modwsgi mod wsgi +2 moreIncorrect header handling in mod-wsgiCVE-2022-2255Fix available7.5 High
- tzinfo, debian linux +1 moreTZInfo relative path traversal vulnerability allows loading of arbitrary filesCVE-2022-31163Fix available7.5 High
- libtirpc project libtirpc, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process...CVE-2021-46828Fix available7.5 High
- gnu sasl, debian linux +1 moreGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API clientCVE-2022-2469Fix available3.8 Low
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- oracle graalvm, azul zulu, debian linux +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21549Fix available5.3 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21541Fix available5.9 Medium
- oracle graalvm, azul zulu, debian linux +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21540Fix available5.3 Medium
- thenify project thenify, debian linux, fedoraproject fedora +2 moreArbitrary Code ExecutionCVE-2020-7677Fix available8.6 High
- jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 morejQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text labelCVE-2022-31160Public exploitFix available6.1 Medium
- linux kernel, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreWhen sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory...CVE-2021-33655Fix available6.7 Medium
- debian linux, lemonldap-ng lemonldap\ +1 moreAn issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer...CVE-2021-40874Fix available9.8 Critical
- debian linux, lemonldap-ng lemonldap\ +1 moreIn LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not...CVE-2020-16093Fix available7.5 High
- arm mbed tls, debian linux +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,...CVE-2022-35409Fix available9.1 Critical
- llhttp, nodejs node, node.js +4 more +6 moreThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...CVE-2022-32215Fix availableEPSS 70.2%6.5 Medium
- llhttp, nodejs node, node.js +2 more +4 morellhttp allows HTTP Request Smuggling via Improper Delimiting of Header FieldsCVE-2022-32214Fix availableEPSS 81.8%6.5 Medium
- llhttp, nodejs node, node.js +4 more +6 morellhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-EncodingCVE-2022-32213Fix availableEPSS 44.8%6.5 Medium
- nodejs node, node.js, debian linux +2 more +4 moreA OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due...CVE-2022-32212Fix available8.1 High
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- linux kernel, debian linux, openatom openeuler +2 moreWhen setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.CVE-2021-33656Fix available6.8 Medium
- debian linux, fedoraproject fedora, intel core i3-6100 firmware +127 more +129 moreArbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)CVE-2022-29901Fix available5.6 Medium
- git, apple xcode, debian linux +1 more +3 moreBypass of safe.directory protections in GitCVE-2022-29187Fix available7.8 High
- qemu, debian linux +1 moresoftmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail...CVE-2022-35414Fix availableDisputed8.8 High
- 0xacab mat2, debian linux +1 moremat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.CVE-2022-35410Fix available7.5 High
- net-snmp, debian linux, fedoraproject fedora +2 morenet-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.CVE-2022-24810Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24809Fix available6.5 Medium
- Show moreLoading…