Skip to contentDebian vulnerabilities
Newest
- gnome librsvg, debian linux, fedoraproject fedora +2 moreA directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local...CVE-2023-38633Fix available5.5 Medium
- debian linux, linux kernel +1 moreUse-after-free in Linux kernel's net/sched: cls_fw componentCVE-2023-3776Public exploitFix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreOut-of-bounds write in Linux kernel's net/sched: sch_qfq componentCVE-2023-3611Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2023-3610Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreUse-after-free in Linux kernel's net/sched: cls_u32 componentCVE-2023-3609Public exploitFix available7.8 High
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosureCVE-2023-34968Fix available5.3 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlightCVE-2023-34967Fix availableEPSS 61.2%5.3 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: infinite loop in mdssvc rpc service for spotlightCVE-2023-34966Fix availableEPSS 62.4%7.5 High
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: out-of-bounds read in winbind auth_crapCVE-2022-2127Fix available5.9 Medium
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...CVE-2023-22049Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...CVE-2023-22045Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...CVE-2023-22044Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...CVE-2023-22041Fix available5.1 Medium
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...CVE-2023-22036Fix available3.7 Low
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...CVE-2023-22006Fix available3.1 Low
- es iperf3, apple macos, debian linux +3 more +5 moreiperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted...CVE-2023-38403Fix available7.5 High
- libtiff, debian linux, fedora +5 more +7 moreSegmentation fault in fax3encode in libtiff/tif_fax3.cCVE-2023-3618Fix available6.5 Medium
- eclipse jetty, debian linux, eclipse jetty.project +2 more +4 moreJetty connection leaking on idle timeout when TCP congestedCVE-2024-22201Fix available7.5 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty's OpenId Revoked authentication allows one requestCVE-2023-41900Fix available3.5 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty accepts "+" prefixed value in Content-LengthCVE-2023-40167Public exploitFix available5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +2 moreJetty vulnerable to errant command quoting in CGI ServletCVE-2023-36479Fix available3.5 Low
- rgrove sanitize, debian linux +1 moreSanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element contentCVE-2023-36823Fix available7.1 High
- jgm pandoc, debian linux +1 moreArbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted inputCVE-2023-35936Fix available6.0 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of...CVE-2023-37211Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen opening Diagcab files, Firefox did not warn the user that these files may contain malicious...CVE-2023-37208Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a URL with a scheme handled by...CVE-2023-37207Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreCross-compartment wrappers wrapping a scripted proxy could have caused objects from other...CVE-2023-37202Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn attacker could have triggered a use-after-free condition when creating a WebRTC connection...CVE-2023-37201Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreLinux Kernel nftables Out-Of-Bounds Read/Write VulnerabilityCVE-2023-35001Public exploitFix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux Kernel nftables Use-After-Free Local Privilege Escalation VulnerabilityCVE-2023-31248Fix available7.8 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidatorCVE-2023-36053Fix available7.5 High
- debian linux, google android +1 moreIn multiple functions of io_uring.c, there is a possible kernel memory corruption due to...CVE-2023-21400Fix available6.7 Medium
- debian linux, google android +1 moreIn multiple functions of binder.c, there is a possible memory corruption due to a use after free....CVE-2023-21255Fix available7.8 High
- debian linux, linux kernel, fedora +6 more +8 moreCrash due to a null pointer dereference in the dn_nsp_send functionCVE-2023-3338Public exploitFix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreUse after free in io_uring in the Linux KernelCVE-2023-3389Fix available7.8 High
- debian linux, linux kernel +1 moreOut-of-bounds write in Linux kernel's ipvlan network driverCVE-2023-3090Fix available7.8 High
- google chrome, debian linux +1 moreUse after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who...CVE-2023-3422Fix available8.8 High
- google chrome, debian linux +1 moreUse after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to...CVE-2023-3421Fix available8.8 High
- google chrome, debian linux +1 moreType Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to...CVE-2023-3420Fix availableEPSS 56.2%8.8 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 moreArtifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the ...CVE-2023-36664Public exploitFix available7.8 High
- debian linux, openprinting cups, apple macos +1 more +3 moreCUPS vulnerable to use-after-free in cupsdAcceptClient()CVE-2023-34241Fix available5.3 Medium
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0CVE-2023-2911Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceededCVE-2023-2828Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- shibboleth xmltooling, debian linux +1 moreShibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows...CVE-2023-36661Public exploitFix available7.5 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in...CVE-2023-35824Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in...CVE-2023-35823Fix available7.0 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreAn issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before...CVE-2023-35788Public exploitFix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn out of bounds (OOB) memory access flaw was found in the Linux kernel in...CVE-2023-3268Fix available7.1 High
- Show moreLoading…