Skip to contentDebian vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote...CVE-2023-1820Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote...CVE-2023-1819Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to...CVE-2023-1818Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49...CVE-2023-1817Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a...CVE-2023-1816Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote...CVE-2023-1815Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615...CVE-2023-1814Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an...CVE-2023-1813Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a...CVE-2023-1812Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who...CVE-2023-1811Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker...CVE-2023-1810Fix available8.8 High
- frrouting, debian linux, fedoraproject fedora +2 moreA reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability...CVE-2022-36440Fix available7.5 High
- artifex ghostscript, debian linux +1 moreIn Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential...CVE-2023-28879Fix available9.8 Critical
- ruby-lang ruby, time, debian linux +1 more +3 moreRuby Time component ReDoS issueCVE-2023-28756Fix available5.3 Medium
- ruby-lang uri, debian linux, fedoraproject fedora +2 moreRuby URI component ReDoS issueCVE-2023-28755Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreA slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless...CVE-2023-1380Fix availableEPSS 16.3%7.1 High
- debian linux, linux kernel, netapp 8300 firmware +13 more +15 moreIn the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the...CVE-2023-1077Fix available7.0 High
- dino, debian linux, fedoraproject fedora +2 moreDino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the...CVE-2023-28686Fix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid...CVE-2023-0386In KEVPublic exploitFix available7.8 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42334Fix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42333Fix available8.6 High
- xen, debian linux, fedoraproject fedora +2 morex86 shadow plus log-dirty mode use-after-free In environments where host assisted address...CVE-2022-42332Fix available7.8 High
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack's header parsingCVE-2023-27539Fix available5.3 Medium
- debian linux, linux kernel, netapp h300s +4 more +6 moredo_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call,...CVE-2023-28466Fix available7.0 High
- rack, debian linux +1 moreRack has possible DoS Vulnerability in Multipart MIME parsingCVE-2023-27530Fix available7.5 High
- apache http server, unbit uwsgi, debian linux +2 moreApache HTTP Server: mod_proxy_uwsgi HTTP response splittingCVE-2023-27522Fix available7.5 High
- wireshark, debian linux +1 moreISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows...CVE-2023-1161Fix available6.3 Medium
- qemu, debian linux +1 moreQemu: lsi53c895a: dma reentrancy issue leads to stack overflowCVE-2023-0330Fix available5.3 Medium
- debian debmanydebmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of...CVE-2023-27635Fix available7.8 High
- vim, vim vim/vim, debian linux +2 more +4 moreIncorrect Calculation of Buffer Size in vim/vimCVE-2023-1175Fix available7.3 High
- debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 moreOpencontainers runc Incorrect Authorization vulnerabilityCVE-2023-27561Fix available7.0 High
- systemd project systemd, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd before 247 does not adequately block local privilege escalation for some Sudo...CVE-2023-26604Fix available7.8 High
- spip, debian linux +1 moreSPIP before 4.2.1 allows Remote Code Execution via form values in the public area because...CVE-2023-27372Public exploitFix availableEPSS 99.7%9.8 Critical
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreIn the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an...CVE-2023-26545Fix available4.7 Medium
- nodejs node, node.js, debian linux +2 moreAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...CVE-2023-23920Fix available4.2 Medium
- mono-project mono, debian linux +1 moreThe mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the...CVE-2023-26314Fix available8.8 High
- libreswan, debian linux +1 moreLibreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon...CVE-2023-23009Fix available6.5 Medium
- apache commons fileupload, apache software foundation tomcat, debian linux +2 moreApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive partsCVE-2023-24998Public exploitFix availableEPSS 48.8%7.5 High
- gnu emacs, debian linux +1 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-48337Fix available9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- djangoproject django, debian linux +1 moreResource exhaustion in DjangoCVE-2023-24580Fix availableEPSS 62.6%7.5 High
- haproxy, debian linux +1 moreHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...CVE-2023-25725Public exploitFix available9.1 Critical
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- struktur libde265, debian linux +1 moreLibde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the...CVE-2023-25221Fix available7.8 High
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24758Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24757Fix available5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...CVE-2023-24756Fix available5.5 Medium
- Show moreLoading…