Skip to contentDebian vulnerabilities
Newest
- debian linux, linux kernel +1 morellc: call sock_orphan() at release timeCVE-2024-26625Fix available7.8 High
- debian linux, linux kernel +1 morejfs: fix slab-out-of-bounds Read in dtSearchCVE-2023-52602Fix available7.8 High
- debian linux, linux kernel +1 morejfs: fix array-index-out-of-bounds in dbAdjTreeCVE-2023-52601Fix available7.8 High
- debian linux, linux kernel +1 moreKVM: s390: fix setting of fpc registerCVE-2023-52597Fix available4.0 Medium
- debian linux, linux kernel, netapp h610c firmware +2 more +4 moredrm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()CVE-2023-52585Fix available5.5 Medium
- debian linux, linux kernel +1 moreceph: fix deadlock or deadcode of misusing dget()CVE-2023-52583Fix available5.5 Medium
- mozilla thunderbird, debian linux +1 moreThe encrypted subject of an email message could be incorrectly and permanently assigned to an...CVE-2024-1936Fix available7.5 High
- debian linux, linux kernel +1 morecifs: Fix UAF in cifs_demultiplex_thread()CVE-2023-52572Fix available7.8 High
- debian linux, linux kernel +1 morevt: fix memory overlapping when deleting chars in the bufferCVE-2022-48627Fix available5.5 Medium
- phpseclib, debian linux +1 morephpseclib guardrails needed on OID lengthCVE-2024-27355Fix available7.5 High
- phpseclib, debian linux, phpseclib 1x +2 more +4 morephpseclib: guardrails needed on isPrime and randomPrimeCVE-2024-27354Fix available7.5 High
- debian linux, linux kernel +1 moretcp: make sure init the accept_queue's spinlocks onceCVE-2024-26614Fix available7.8 High
- debian linux, linux kernel +1 moredmaengine: fix NULL pointer in channel unregistration functionCVE-2023-52492Fix available4.4 Medium
- debian linux, linux kernel +1 moremm/sparsemem: fix race in accessing memory_section->usageCVE-2023-52489Fix available4.7 Medium
- debian linux, linux kernel +1 morex86/srso: Add SRSO mitigation for Hygon processorsCVE-2023-52482Fix available7.8 High
- rack, debian linux +1 moreRack ReDos in content type parsing (2nd degree polynomial)CVE-2024-25126Fix availableEPSS 35.4%5.3 Medium
- rack, debian linux +1 morePossible DoS Vulnerability with Range Header in RackCVE-2024-26141Fix available5.8 Medium
- rack, debian linux +1 morePossible Denial of Service Vulnerability in Rack Header ParsingCVE-2024-26146Fix available5.3 Medium
- lsegal yard, debian linux, fedoraproject fedora +2 moreYARD's default template vulnerable to Cross-site Scripting in generated frames.htmlCVE-2024-27285Fix available5.4 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted archives or...CVE-2024-25082Public exploitFix available6.5 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted filenames.CVE-2024-25081Public exploitFix available4.2 Medium
- debian linux, linux kernel +1 moreKVM: arm64: vgic-its: Avoid potential UAF in LPI translation cacheCVE-2024-26598Fix available8.8 High
- debian linux, linux kernel +1 moresmb: client: fix potential OOBs in smb2_parse_contexts()CVE-2023-52434Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of...CVE-2024-1553Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIncorrect code generation could have led to unexpected numeric conversions and potential...CVE-2024-1552Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreSet-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an...CVE-2024-1551Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious website could have used a combination of exiting fullscreen mode and ...CVE-2024-1550Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf a website set a large custom cursor, portions of the cursor could have overlapped with the...CVE-2024-1549Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA website could have obscured the fullscreen notification by using a dropdown select input...CVE-2024-1548Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThrough a series of API calls and redirects, an attacker-controlled alert dialog could have been...CVE-2024-1547Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen storing and re-accessing data on a networking channel, the length of buffers may have been...CVE-2024-1546Fix available7.5 High
- debian linux, linux kernel +1 morenetfilter: nft_set_rbtree: skip end interval element from gcCVE-2024-26581Public exploitFix available7.8 High
- debian linux, fedoraproject fedora, redhat enterprise linux +1 more +3 moreThe implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...CVE-2023-52160Public exploitFix available6.5 Medium
- tianocore edk2, canonical lxd, canonical ltd. ubuntu edk ii +1 more +3 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...CVE-2023-48733Fix available6.7 Medium
- debian linux, fedoraproject fedora, openidc mod auth openidc +2 moreDenial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidcCVE-2024-24814Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +5 more +7 moreThe Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is...CVE-2023-50868Public exploitFix availableEPSS 74.3%7.5 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: stack overflow problem in open vswitch kernel module leading to dosCVE-2024-1151Fix available5.5 Medium
- rhonabwy project rhonabwy, debian linux +1 moreIn Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable...CVE-2024-25714Fix available9.8 Critical
- libjwt, bencollins jwt c library, debian linux +2 morelibjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it...CVE-2024-25189Fix available9.8 Critical
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in __nvmet_req_completeCVE-2023-6536Fix available6.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in nvmet_tcp_build_iovecCVE-2023-6356Fix available6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()CVE-2024-24857Fix available4.6 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()CVE-2024-24858Fix available4.6 Medium
- debian linux, linux kernel, fedoraproject fedora +15 more +17 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2024-1086In KEVPublic exploitFix availableEPSS 28.1%7.8 High
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of serviceCVE-2023-52356Public exploitFix available7.5 High
- debian linux, fedoraproject fedora, linux kernel +2 moreLinux: netback processing of zero-length transmit fragmentCVE-2023-46838Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...CVE-2024-0808Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...CVE-2024-0755Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...CVE-2024-0753Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious devtools extension could have been used to escalate privileges. This vulnerability...CVE-2024-0751Fix available8.8 High
- Show moreLoading…