Skip to contentDebian vulnerabilities
Newest
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications delay calculation could have made it possible for an attacker to...CVE-2024-0750Fix available8.8 High
- mozilla firefox, thunderbird, debian linux +1 more +3 moreA phishing site could have repurposed an `about:` dialog to show phishing content with an...CVE-2024-0749Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...CVE-2024-0747Fix available6.5 Medium
- debian linux, mozilla firefox, firefox esr +1 more +3 moreA Linux user opening the print preview dialog could have caused the browser to crash. This...CVE-2024-0746Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2024-0742Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...CVE-2024-0741Public exploitFix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: nf_tables: pointer math issue in nft_byteorder_eval()CVE-2024-0607Fix available6.6 Medium
- oracle graalvm, graalvm for jdk, jdk +7 more +9 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-20952Fix available7.4 High
- oracle graalvm, graalvm for jdk, jdk +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-20926Fix available5.9 Medium
- oracle graalvm, graalvm for jdk, jdk +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2024-20918Fix available7.4 High
- gnu gnutls, debian linux, fedoraproject fedora +10 more +12 moreGnutls: rejects certificate chain with distributed trustCVE-2024-0567Fix available7.5 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 moreXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerCVE-2023-6816Fix available9.8 Critical
- debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 moreKernel: null pointer dereference vulnerability in ida_free in lib/idr.cCVE-2023-6915Fix available6.2 Medium
- debian linux, linux kernel +1 moreAn out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)CVE-2023-6040Fix available7.8 High
- debian cpioDebian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE...CVE-2023-7207Fix available4.9 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreKernel: aoe: improper reference count leads to use-after-free vulnerabilityCVE-2023-6270Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a...CVE-2023-51782Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has...CVE-2023-51781Fix available7.0 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a...CVE-2023-51780Fix available7.0 High
- douglas wilson spreadsheet::parseexcel, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code Execution (ACE) VulnerabilityCVE-2023-7101In KEVPublic exploitFix availableEPSS 19.0%7.8 High
- exim, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreExim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a...CVE-2023-51766Fix available5.3 Medium
- qt, debian linux +1 moreAn issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3...CVE-2023-51714Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker...CVE-2023-7024In KEVPublic exploitFix available8.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreUse-after-free in Linux kernel's ipv4: igmp componentCVE-2023-6932Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreOut-of-bounds write in Linux kernel's Performance Events system componentCVE-2023-6931Public exploitFix available7.8 High
- mozilla firefox, debian linux +1 moreMemory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory...CVE-2023-6873Fix available8.8 High
- mozilla firefox, firefox esr, debian linux +2 moreThe timing of a button click causing a popup to disappear was approximately the same length as...CVE-2023-6867Fix available6.1 Medium
- mozilla firefox, firefox esr, debian linux +2 more`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only...CVE-2023-6865Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of...CVE-2023-6864Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on...CVE-2023-6863Fix available8.8 High
- mozilla firefox esr, thunderbird, debian linux +2 moreA use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest...CVE-2023-6862Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in...CVE-2023-6861Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe `VideoBridge` allowed any content process to use textures produced by remote decoders. This...CVE-2023-6860Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA use-after-free condition affected TLS socket creation when under memory pressure. This...CVE-2023-6859Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFirefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM...CVE-2023-6858Fix available8.8 High
- debian linux, mozilla firefox, firefox esr +1 more +3 moreWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...CVE-2023-6857Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on...CVE-2023-6856Fix availableEPSS 20.6%8.8 High
- mozilla thunderbird, debian linux +1 moreThe signature of a digitally signed S/MIME email message may optionally specify the signature...CVE-2023-50761Fix available4.3 Medium
- mozilla thunderbird, debian linux +1 moreWhen processing a PGP/MIME payload that contains digitally signed text, the first paragraph of...CVE-2023-50762Fix available4.3 Medium
- redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 moreAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesCVE-2023-5115Fix available6.3 Medium
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...CVE-2023-51385Public exploitFix availableEPSS 19.8%6.5 Medium
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreIn ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied....CVE-2023-51384Fix available5.5 Medium
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyCVE-2023-6478Fix available7.6 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsCVE-2023-6377Fix available7.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS...CVE-2023-42883Fix available5.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreLink targets allow arbitrary script executionCVE-2023-6186Fix available8.3 High
- libreoffice, debian linux, fedoraproject fedora +2 moreImproper input validation enabling arbitrary Gstreamer pipeline injectionCVE-2023-6185Fix available8.3 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a...CVE-2023-6512Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6511Fix available4.3 Medium
- Show moreLoading…