Skip to contentDebian vulnerabilities
Newest
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41741CVE-2022-41741Public exploitFix available7.0 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the...CVE-2022-3586Fix available5.5 Medium
- git, apple xcode, debian linux +1 more +3 moreGit vulnerable to Remote Code Execution via Heap overflow in `git shell`CVE-2022-39260Fix available8.5 High
- git, apple xcode, debian linux +1 more +3 moreGit subject to exposure of sensitive information via local clone of symbolic linksCVE-2022-39253Public exploitFix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel BPF r8152.c intr_callback logging of excessive dataCVE-2022-3594Fix available5.3 Medium
- jhead project jhead, debian linux, fedoraproject fedora +2 moreJhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG...CVE-2022-41751Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after freeCVE-2022-3564Public exploitFix available5.5 Medium
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c ProcXkbGetKbdByName memory leakCVE-2022-3551Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c _GetCountedString buffer overflowCVE-2022-3550Fix available5.5 Medium
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel IPsec nfp_cppcore.c area_cache_get use after freeCVE-2022-3545Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel libbpf btf_dump.c btf_dump_name_dups use after freeCVE-2022-3534Fix available5.1 Medium
- isaacs minimatch, debian linux, fedoraproject fedora +2 moreminimatch ReDoS vulnerabilityCVE-2022-3517Fix available7.5 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPv6 ipv6_renew_options memory leakCVE-2022-3524Fix available4.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel kcm kcmsock.c kcm_tx_work race conditionCVE-2022-3521Fix available2.6 Low
- powerline gitstatus project gitstatus, debian linux +1 morePowerline Gitstatus vulnerable to arbitrary code executionCVE-2022-42906Fix available7.8 High
- linaro lava, debian linux +1 moreIn Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code...CVE-2022-42902Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreIn the Linux kernel 5.8 through 5.19.14, local attackers able to inject WLAN frames into the...CVE-2022-42722Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19...CVE-2022-42721Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreVarious refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1...CVE-2022-42720Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2...CVE-2022-42719Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreAn issue was discovered in the Linux kernel through 5.19.11. Attackers able to inject WLAN frames...CVE-2022-41674Fix available8.1 High
- webpack.js loader-utils, debian linux +1 morePrototype pollution in webpack loader-utilsCVE-2022-37601Fix available9.8 Critical
- dropbear ssh project ssh, debian linux +1 moreAn issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the...CVE-2021-36369Fix available7.5 High
- ini4j project ini4j, debian linux +1 moreorg.ini4j allows attackers to cause a Denial of Service (DoS)CVE-2022-41404Public exploitFix available7.5 High
- xmldom project xmldom, debian linux +1 moreWithdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldomCVE-2022-37616Fix available9.8 Critical
- debian linux, fedoraproject fedora, xen +2 morelock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call...CVE-2022-33748Fix available5.6 Medium
- debian linux, fedoraproject fedora, xen +2 moreArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing...CVE-2022-33747Fix available3.8 Low
- debian linux, fedoraproject fedora, xen +2 moreP2M pool freeing may take excessively long The P2M pool backing second level address translation...CVE-2022-33746Fix available6.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreMacro URL arbitrary script executionCVE-2022-3140Fix available6.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel IPv4 fib_semantics.c fib_nh_match out-of-boundsCVE-2022-3435Fix available4.3 Medium
- hsqldb hypersql database, hypersql database hsqldb, debian linux +2 moreRemote code execution in HyperSQL DataBaseCVE-2022-41853Public exploitFix available8.0 High
- nodejs node, node.js, debian linux +1 more +3 moreA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...CVE-2022-35255Fix available9.1 Critical
- isc dhcp, debian linux, fedoraproject fedora +2 moreDHCP memory leakCVE-2022-2929Fix available6.5 Medium
- isc dhcp, debian linux, fedoraproject fedora +2 moreAn option refcount overflow exists in dhcpdCVE-2022-2928Fix available6.5 Medium
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...CVE-2022-40617Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +1 more +3 moreUncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +1 more +3 moreUncontrolled Resource Consumption in Jackson-databindCVE-2022-42003Fix available7.5 High
- llhttp, nodejs node, debian linux +2 more +4 moreThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...CVE-2022-35256Fix available6.5 Medium
- google android, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to...CVE-2022-20422Fix available7.0 High
- google android, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use...CVE-2022-20421Public exploitFix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreroccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race...CVE-2022-41850Fix available4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and...CVE-2022-41849Fix available4.2 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3352Fix available7.8 High
- php, debian linux, fedoraproject fedora +2 more$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesCVE-2022-31629Public exploitFix availableEPSS 49.6%6.5 Medium
- php, debian linux, fedoraproject fedora +2 morephar wrapper can occur dos when using quine gzip fileCVE-2022-31628Fix available2.3 Low
- ovs, cloudbase open vswitch, debian linux +2 moreovs - buffer over-readCVE-2022-32166Fix available6.1 Medium
- symfony twig, debian linux, drupal +1 more +3 moreTwig may load a template outside a configured directory when using the filesystem loaderCVE-2022-39261Fix available7.5 High
- apache tomcat, debian linux +1 moreApache Tomcat: Information disclosureCVE-2021-43980Fix available3.7 Low
- vim, vim vim/vim, debian linux +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-3324Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It...CVE-2022-3303Fix available4.7 Medium
- Show moreLoading…