Skip to contentDebian vulnerabilities
Newest
- freerdp, debian linux, fedoraproject fedora +2 moreFreeRDP Null Pointer Dereference leading denial of serviceCVE-2023-39351Fix available5.3 Medium
- freerdp, debian linux +1 moreFreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICSCVE-2023-393557.0 High
- freerdp, debian linux, fedoraproject fedora +2 moreFreeRDP Out-Of-Bounds Read in nsc_rle_decompress_dataCVE-2023-39354Fix available5.9 Medium
- freerdp, debian linux, fedoraproject fedora +2 moreIncorrect offset calculation leading to denial of service in FreeRDPCVE-2023-39350Fix available5.9 Medium
- freerdp, debian linux, fedoraproject fedora +2 moreFreeRDP Global-Buffer-Overflow in ncrush_decompressCVE-2023-40589Fix available4.3 Medium
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...CVE-2023-20900Fix available7.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker...CVE-2023-4572Fix available8.8 High
- frrouting, debian linux +1 moreAn issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large...CVE-2023-41361Fix available9.8 Critical
- frrouting, debian linux, fedoraproject fedora +2 moreAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte...CVE-2023-41360Fix available9.1 Critical
- frrouting, debian linux, fedoraproject fedora +2 moreAn issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the...CVE-2023-41358Fix available7.5 High
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cCVE-2023-4569Fix available5.5 Medium
- frrouting, pica8 picos, debian linux +1 more +3 moreFRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial...CVE-2023-38802Fix available7.5 High
- qemu, debian linux +1 moreAn issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute...CVE-2020-24165Fix availableDisputed8.8 High
- apache tomcat, debian linux +1 moreApache Tomcat: Open redirect with FORM authenticationCVE-2023-41080Public exploitFix available6.1 Medium
- prometheus alertmanager, debian linux +1 moreAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpointCVE-2023-40577Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote...CVE-2023-4431Fix available8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to...CVE-2023-4430Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to...CVE-2023-4429Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote...CVE-2023-4428Fix availableEPSS 11.3%8.1 High
- apache xml graphics batik, debian linux +1 moreApache XML Graphics Batik: Information disclosure vulnerabilityCVE-2022-44729Fix available7.1 High
- apache xml graphics batik, debian linux +1 moreApache XML Graphics Batik: Information disclosure vulnerabilityCVE-2022-44730Fix available4.4 Medium
- python, debian linux, netapp active iq unified manager +1 more +3 moreAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...CVE-2022-48566Fix available5.9 Medium
- python, debian linux +1 moreAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...CVE-2022-48565Public exploitFix available9.8 Critical
- python, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA use-after-free exists in Python through 3.9 via heappushpop in heapq.CVE-2022-48560Fix available7.5 High
- file project file, debian linux +1 moreFile before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is...CVE-2022-48554Fix available5.5 Medium
- busybox, debian linux, siemens ruggedcom rst2428p +16 more +18 moreThere is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment...CVE-2022-48174Fix available9.8 Critical
- freedesktop poppler, debian linux +1 moreAn issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of...CVE-2022-37051Fix available6.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service...CVE-2022-37050Fix available6.5 Medium
- gnu scientific library, debian linux +1 moreA buffer overflow can occur when calculating the quantile value using the Statistics Library of...CVE-2020-35357Fix available6.5 Medium
- freedesktop poppler, debian linux +1 moreUncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause...CVE-2020-23804Fix available7.5 High
- c-ares, debian linux +1 moreBuffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function...CVE-2020-22217Fix available5.9 Medium
- invisible-island ncurses, debian linux, netapp active iq unified manager +3 more +5 moreBuffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in...CVE-2020-19189Fix available6.5 Medium
- qt, debian linux +1 moreIn Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an...CVE-2023-37369Fix available7.5 High
- google chrome, debian linux +1 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed...CVE-2023-4368Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed...CVE-2023-4367Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who...CVE-2023-4366Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a...CVE-2023-4365Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96...CVE-2023-4364Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96...CVE-2023-4363Fix available4.3 Medium
- google chrome, debian linux +1 moreHeap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote...CVE-2023-4362Fix availableEPSS 19.1%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96...CVE-2023-4361Fix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote...CVE-2023-4360Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96...CVE-2023-4359Fix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to...CVE-2023-4358Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed...CVE-2023-4357Public exploitFix availableEPSS 47.1%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has...CVE-2023-4356Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote...CVE-2023-4355Fix availableEPSS 27.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...CVE-2023-4354Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker...CVE-2023-4353Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to...CVE-2023-4352Fix available8.8 High
- Show moreLoading…