Skip to contentDebian vulnerabilities
Newest
- roundcube webmail, debian linux +1 moreRoundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.CVE-2024-37383In KEVPublic exploitFix availableEPSS 74.0%6.1 Medium
- mongodb pymongo, debian linux +1 moreOut-of-bounds read in bson module of PyMongoCVE-2024-5629Fix available4.7 Medium
- chromium libvpx, debian linux +1 moreInteger overflow in libvpxCVE-2024-5197Fix available5.9 Medium
- debian linux, linux kernel +1 morefs/9p: only translate RWX permissions for plain 9P2000CVE-2024-36964Fix available8.8 High
- debian linux, linux kernel +1 moredrm/vmwgfx: Fix invalid reads in fence signaled eventsCVE-2024-36960Fix available7.1 High
- debian as dcp libasdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader...CVE-2024-370178.1 High
- debian linux, linux kernel +1 moreocteontx2-af: avoid off-by-one read from userspaceCVE-2024-36957Fix available5.5 Medium
- debian linux, linux kernel +1 moretipc: fix a possible memleak in tipc_buf_appendCVE-2024-36954Fix available5.5 Medium
- debian linux, linux kernel +1 moreKVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()CVE-2024-36953Fix available5.5 Medium
- debian linux, linux kernel +1 morefirewire: ohci: mask bus reset interrupts between ISR and bottom halfCVE-2024-36950Fix available4.4 Medium
- debian linux, linux kernel +1 morephonet: fix rtm_phonet_notify() skb allocationCVE-2024-36946Fix available5.5 Medium
- debian linux, linux kernel +1 morewifi: nl80211: don't free NULL coalescing ruleCVE-2024-36941Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morepinctrl: core: delete incorrect free in pinctrl_enable()CVE-2024-36940Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfs: Handle error of rpc_proc_register() in nfs_net_init().CVE-2024-36939Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebna: ensure the copied buf is NUL terminatedCVE-2024-36934Fix available7.8 High
- debian linux, linux kernel +1 morensh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().CVE-2024-36933Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: core: reject skb_copy(_expand) for fraglist GSO skbsCVE-2024-36929Fix available7.5 High
- debian linux, linux kernel +1 morescsi: bnx2fc: Remove spin_lock_bh while releasing resources after uploadCVE-2024-36919Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreblk-iocost: avoid out of bounds shiftCVE-2024-36916Fix available7.1 High
- debian linux, linux kernel +1 moreDrivers: hv: vmbus: Leak pages if set_memory_encrypted() failsCVE-2024-36913Fix available9.3 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV socketsCVE-2024-36905Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: Use refcount_inc_not_zero() in tcp_twsk_unique().CVE-2024-36904Fix available7.8 High
- debian linux, linux kernel +1 moremptcp: ensure snd_nxt is properly initialized on connectCVE-2024-36889Fix available5.5 Medium
- debian linux, linux kernel +1 moretipc: fix UAF in error pathCVE-2024-36886Public exploitFix available9.8 Critical
- debian linux, linux kernel +1 morenet: fix out-of-bounds access in ops_initCVE-2024-36883Fix available7.8 High
- debian linux, linux kernel +1 moreclk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate changeCVE-2023-52882Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei40e: fix vf may be used uninitialized in this function warningCVE-2024-36020Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morertnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validationCVE-2024-36017Fix available5.5 Medium
- openssl, debian linux, netapp 500f firmware +32 more +34 moreUse After Free with SSL_free_buffersCVE-2024-4741Fix available9.8 Critical
- debian linux, linux kernel +1 moretty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldiscCVE-2023-52880Fix available7.8 High
- gstreamer, debian linux +1 moreGStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution VulnerabilityCVE-2024-4453Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amdgpu: Fix even more out of bound writes from debugfsCVE-2021-47489Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd: check num of link levels when update pcie paramCVE-2023-52812Fix available7.8 High
- debian linux, linux kernel +1 moresmb: client: fix potential deadlock when releasing midsCVE-2023-52757Fix available7.8 High
- debian linux, linux kernel +1 moresmb: client: fix use-after-free bug in cifs_debug_data_proc_show()CVE-2023-52752Fix available7.8 High
- debian linux, linux kernel +1 morenet/mlx5e: Fix use-after-free of encap entry in neigh update handlerCVE-2021-47247Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moremlxsw: spectrum_acl_tcam: Fix warning during rehashCVE-2024-36007Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moremlxsw: spectrum_acl_tcam: Fix incorrect list API usageCVE-2024-36006Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: nf_tables: honor table dormant flag from netdev release event pathCVE-2024-36005Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei40e: Do not use WQ_MEM_RECLAIM flag for workqueueCVE-2024-36004Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morecpu: Re-enable CPU mitigations by default for !X86 architecturesCVE-2024-35996Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreriscv: Fix TASK_SIZE on 64-bit NOMMUCVE-2024-35988Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moregeneve: fix header validation in geneve[6]_xmit_skbCVE-2024-35973Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addrCVE-2024-35969Fix available8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: SCO: Fix not validating setsockopt user inputCVE-2024-35967Fix available7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: complete validation of user inputCVE-2024-35962Fix available7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet/mlx5: Properly link new fs rules into the treeCVE-2024-35960Fix available9.1 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: ena: Fix incorrect descriptor free behaviorCVE-2024-35958Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morekprobes: Fix possible use-after-free issue on kprobe registrationCVE-2024-35955Fix available8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/client: Fully protect modes[] with dev->mode_config.mutexCVE-2024-35950Fix available7.8 High
- Show moreLoading…