Skip to contentDebian vulnerabilities
Newest
- oracle graalvm, graalvm for jdk, jdk +9 more +11 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2025-21502Fix available4.8 Medium
- oracle mysql server, debian linux +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2025-21490Fix available4.9 Medium
- debian linux, netapp 500f firmware, 8300 firmware +27 more +29 moreTiming side-channel in ECDSA signature computationCVE-2024-13176Public exploitFix available4.6 Medium
- git, debian linux +1 moreNewline confusion in credential helpers can lead to credential exfiltration in gitCVE-2024-52006Fix available2.1 Low
- git, debian linux +1 moreGit does not sanitize URLs when asking for credentials interactivelyCVE-2024-50349Fix available2.1 Low
- djangoproject django, debian linux +1 moreDjango has a potential denial-of-service vulnerability in IPv6 validationCVE-2024-56374Fix available5.8 Medium
- libreoffice, debian linux +1 moreURL fetching can be used to exfiltrate arbitrary INI file values and environment variablesCVE-2024-12426Fix available6.7 Medium
- libreoffice, debian linux +1 morePath traversal leading to arbitrary .ttf file writeCVE-2024-12425Fix available2.4 Low
- redis, debian linux +1 moreRedis' Lua library commands may lead to remote code executionCVE-2024-46981Public exploitFix available7.0 High
- debian linux, linux kernel +1 moremedia: atomisp: Add check for rgby_data memory allocation failureCVE-2024-56705Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenet/ipv6: release expired exception dst cached in socketCVE-2024-56644Fix available7.5 High
- debian linux, linux kernel +1 moreALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesCVE-2024-53197In KEVFix available7.8 High
- debian linux, linux kernel +1 moreALSA: usb-audio: Fix out of bounds reads when finding clock sourcesCVE-2024-53150In KEVFix available7.1 High
- gstreamer, debian linux +1 moreGHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writesCVE-2024-47606Fix available8.6 High
- apache subversion, debian linux +1 moreApache Subversion: mod_dav_svn denial-of-service via control characters in pathsCVE-2024-46901Fix available3.1 Low
- debian linux, linux kernel +1 moremedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatCVE-2024-53104In KEVPublic exploitFix available7.8 High
- sangoma asterisk, debian linux +1 moreAn issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0...CVE-2024-53566Fix available5.5 Medium
- apple ipados, macos, safari +6 more +8 moreA cookie management issue was addressed with improved state management. This issue is fixed in...CVE-2024-44309In KEVFix availableEPSS 21.9%6.3 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2...CVE-2024-44308In KEVPublic exploitFix available8.8 High
- debian linux, linux kernel, google android +3 more +5 moreHID: core: zero-initialize the report bufferCVE-2024-50302In KEVFix available5.5 Medium
- debian linux, module::scandeps, module scandeps needrestart +1 more +3 moreModerate: perl-Module-ScanDeps security updateCVE-2024-10224Fix available5.3 Medium
- apache tomcat, debian linux +1 moreApache Tomcat: Authentication bypass when using Jakarta Authentication APICVE-2024-52316Public exploitFix available9.8 Critical
- debian linux, linux kernel +1 moremm/khugepaged: fix ->anon_vma raceCVE-2023-52935Fix available7.8 High
- postgresql, debian linux +1 morePostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDCVE-2024-10978Fix available4.2 Medium
- icinga, debian linux, icinga icinga2 +1 more +3 moreIcinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API ConnectionsCVE-2024-49369Public exploitFix available9.8 Critical
- gnome glib, debian linux, netapp active iq unified manager +31 more +33 moregio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...CVE-2024-52533Fix available9.8 Critical
- debian linux, linux kernel +1 moreuprobe: avoid out-of-bounds memory access of fetching argsCVE-2024-50067Fix available7.8 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 moreAn issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser...CVE-2024-50602Public exploitFix available5.9 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Prevent tail call between progs attached to different hooksCVE-2024-50063Fix available7.8 High
- debian linux, linux kernel +1 moredriver core: bus: Fix double free in driver API bus_register()CVE-2024-50055Fix available7.8 High
- debian linux, linux kernel +1 moreALSA: asihpi: Fix potential OOB array accessCVE-2024-50007Fix available7.8 High
- debian linux, linux kernel +1 morecifs: Fix buffer overflow when parsing NFS reparse pointsCVE-2024-49996Fix available9.4 Critical
- debian linux, linux kernel +1 moredrm/amdkfd: amdkfd_free_gtt_mem clear the correct pointerCVE-2024-49991Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd/display: fix double free issue during amdgpu module unloadCVE-2024-49989Fix available7.8 High
- debian linux, linux kernel +1 moreplatform/x86: x86-android-tablets: Fix use after free on platform_device_register() errorsCVE-2024-49986Fix available7.8 High
- debian linux, linux kernel +1 moreocfs2: cancel dqi_sync_work before freeing oinfoCVE-2024-49966Fix available7.8 High
- debian linux, linux kernel +1 moreext4: fix timer use-after-free on failed mountCVE-2024-49960Fix available7.8 High
- debian linux, linux kernel +1 moreBluetooth: L2CAP: Fix uaf in l2cap_connectCVE-2024-49950Fix available8.8 High
- debian linux, linux kernel +1 morefbdev: pxafb: Fix possible use after free in pxafb_task()CVE-2024-49924Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more +4 moredrm/amd/display: Fix index out of bounds in degamma hardware format translationCVE-2024-49894Fix available7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: fix slab-use-after-free in ext4_split_extent_at()CVE-2024-49884Fix available7.8 High
- debian linux, linux kernel +1 moreext4: aovid use-after-free in ext4_ext_insert_extent()CVE-2024-49883Fix available7.8 High
- debian linux, linux kernel +1 moreext4: fix double brelse() the buffer of the extents pathCVE-2024-49882Public exploitFix available7.8 High
- debian linux, linux kernel +1 moremm: call the security_mmap_file() LSM hook in remap_file_pages()CVE-2024-47745Fix available7.8 High
- debian linux, linux kernel +1 morefirmware_loader: Block path traversalCVE-2024-47742Fix available7.8 High
- debian linux, linux kernel +1 morecrypto: hisilicon/qm - inject error before stopping queueCVE-2024-47730Fix available7.0 High
- debian linux, linux kernel +1 moredrivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write errorCVE-2024-47698Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write errorCVE-2024-47697Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()CVE-2024-47685Fix available9.1 Critical
- debian linux, netapp 500f firmware, a250 firmware +30 more +32 moreLow-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143Fix availableEPSS 12.5%8.8 High
- Show moreLoading…