Skip to contentDebian vulnerabilities
Newest
- awstats, debian linux, fedoraproject fedora +2 moreAWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:...CVE-2022-46391Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...CVE-2022-4907Fix available8.8 High
- videolan vlc media player, debian linux +1 moreAn integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows...CVE-2022-41325Fix available7.8 High
- apache commons net, debian linux +1 moreApache Commons Net's FTP client trusts the host from PASV response by defaultCVE-2021-37533Fix available6.5 Medium
- g810-led project g810-led, debian linux +1 moreg810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to...CVE-2022-46338Fix available6.5 Medium
- gnu emacs, debian linux, fedoraproject fedora +2 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-45939Fix available7.8 High
- sinatra, debian linux +1 moreSinatra vulnerable to Reflected File Download attackCVE-2022-45442Public exploitFix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth...CVE-2022-45934Public exploitFix available7.8 High
- openjsf express, qs project qs, debian linux +2 moreqs vulnerable to Prototype PollutionCVE-2022-24999Public exploitFix availableEPSS 15.7%7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-4141Fix available7.3 High
- artifex mujs, debian linux, fedoraproject fedora +2 moreA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.1 allows an...CVE-2022-44789Public exploitFix available8.8 High
- pgjdbc, postgresql jdbc driver, debian linux +2 moreTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcCVE-2022-41946Fix available4.7 Medium
- libarchive, debian linux, fedoraproject fedora +1 more +3 moreIn libarchive 3.6.1, the software does not check for an error after calling calloc function that...CVE-2022-36227Fix available9.8 Critical
- linaro lava, debian linux +1 moreIn Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials...CVE-2022-44641Fix available6.5 Medium
- heimdal, debian linux +1 moreRead one byte past a buffer when normalizing UnicodeCVE-2022-41916Fix available5.9 Medium
- nodejs node, node.js, debian linux +2 moreA OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19...CVE-2022-43548Fix availableEPSS 14.9%8.1 High
- libtiff, apple ipados, iphone os +4 more +6 moreLibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflowCVE-2022-3970Fix available6.3 Medium
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...CVE-2022-45188Fix available7.8 High
- xfce xfce4-settings, debian linux, fedoraproject fedora +2 moreIn Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection...CVE-2022-45062Fix available9.8 Critical
- varnish-software varnish cache, varnish cache project cache, debian linux +2 more +4 moreAn HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x...CVE-2022-45060Fix available7.5 High
- google chrome, debian linux +1 moreHeap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a...CVE-2022-3890Fix available9.6 Critical
- google chrome, debian linux +1 moreType confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...CVE-2022-3889Fix available8.8 High
- google chrome, debian linux +1 moreUse after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...CVE-2022-3888Fix available8.8 High
- google chrome, debian linux +1 moreUse after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker...CVE-2022-3887Fix available8.8 High
- google chrome, debian linux +1 moreUse after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote...CVE-2022-3886Fix available8.8 High
- google chrome, debian linux +1 moreUse after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...CVE-2022-3885Fix available8.8 High
- debian linux, sysstat, fedoraproject fedora +2 moresysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflowCVE-2022-39377Fix available7.0 High
- net-snmp, debian linux, netapp h300s firmware +3 more +5 morehandle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has...CVE-2022-44793Fix availableEPSS 53.5%6.5 Medium
- net-snmp, debian linux, netapp h300s firmware +3 more +5 morehandle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a...CVE-2022-44792Fix availableEPSS 52.1%6.5 Medium
- jhead project jhead, debian linux +1 morejhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.CVE-2021-34055Fix available7.8 High
- pixman, debian linux, fedoraproject fedora +2 moreIn libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer...CVE-2022-44638Fix available8.8 High
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43253Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43252Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43250Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43249Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43248Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal...CVE-2022-43245Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43244Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43243Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma...CVE-2022-43242Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in...CVE-2022-43241Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43240Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma...CVE-2022-43239Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse...CVE-2022-43238Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void...CVE-2022-43237Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via...CVE-2022-43236Fix available6.5 Medium
- struktur libde265, debian linux +1 moreLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via...CVE-2022-43235Fix available6.5 Medium
- stb project stb, debian linux +1 morestb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information...CVE-2021-37789Fix available8.1 High
- xmldom, debian linux +1 morexmldom allows multiple root nodes in a DOMCVE-2022-39353Fix available9.4 Critical
- apple ipados, macos, safari +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1,...CVE-2022-42824Fix available5.5 Medium
- Show moreLoading…