Skip to contentDebian vulnerabilities
Newest
- debian linux, linux kernel +1 moremedia: venus: hfi: add a check to handle OOB in sfr regionCVE-2025-23159Fix available8.4 High
- debian linux, linux kernel +1 moremedia: venus: hfi: add check to handle incorrect queue sizeCVE-2025-23158Fix available7.8 High
- debian linux, linux kernel +1 moremedia: venus: hfi_parser: add check to avoid out of bound accessCVE-2025-23157Fix available7.8 High
- debian linux, linux kernel +1 moremedia: venus: hfi_parser: refactor hfi packet parsing logicCVE-2025-23156Fix available7.8 High
- debian linux, linux kernel +1 morebus: mhi: host: Fix race between unprepare and queue_bufCVE-2025-23151Fix available7.8 High
- debian linux, linux kernel +1 moreext4: fix off-by-one error in do_splitCVE-2025-23150Fix available7.8 High
- debian linux, linux kernel +1 moresoc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()CVE-2025-23148Fix available5.5 Medium
- debian linux, linux kernel +1 morei3c: Add NULL pointer check in i3c_master_queue_ibi()CVE-2025-23147Fix available5.5 Medium
- debian linux, linux kernel +1 moremfd: ene-kb3930: Fix a potential NULL pointer dereferenceCVE-2025-23146Fix available5.5 Medium
- debian linux, linux kernel +1 moremptcp: fix NULL pointer in can_accept_new_subflowCVE-2025-23145Fix available7.5 High
- debian linux, linux kernel +1 morebacklight: led_bl: Hold led_access lock when calling led_sysfs_disable()CVE-2025-23144Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morenet: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.CVE-2025-23143Fix available5.5 Medium
- debian linux, linux kernel +1 moresctp: detect and prevent references to a freed transport in sendmsgCVE-2025-23142Fix available7.8 High
- debian linux, linux kernel +1 moreKVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accessesCVE-2025-23141Fix available7.8 High
- debian linux, linux kernel +1 moremisc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq errorCVE-2025-23140Fix available5.5 Medium
- debian trixieCertain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary...CVE-2025-47153Fix available6.5 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- redis, debian linux, lfprojects valkey +2 moreRedis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientCVE-2025-21605Fix available7.5 High
- imagemagick, debian linux +1 moreIn MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after...CVE-2025-43965Fix available2.9 Low
- debian linux, linux kernel +1 morenet_sched: skbprio: Remove overly strict queue assertionsCVE-2025-38637Fix available5.5 Medium
- debian linux, linux kernel +1 moreksmbd: use aead_request_free to match aead_request_allocCVE-2025-38575Fix available5.5 Medium
- pgbouncer, debian linux +1 morePgBouncer default auth_query does not take Postgres password expiry into accountCVE-2025-2291Fix available8.1 High
- debian linux, linux kernel +1 morewatch_queue: fix pipe accounting mismatchCVE-2025-23138Fix available5.5 Medium
- debian linux, linux kernel +1 morewifi: cfg80211: init wiphy_work before allocating rfkill failsCVE-2025-22119Fix available5.5 Medium
- debian linux, linux kernel +1 moreksmbd: add bounds check for create lease contextCVE-2025-22042Fix available8.1 High
- debian linux, linux kernel +1 moreksmbd: fix session use-after-free in multichannel connectionCVE-2025-22040Fix available8.8 High
- erlang erlang/otp, otp, cisco cloud native broadband network gateway +22 more +24 moreErlang/OTP SSH Vulnerable to Pre-Authentication RCECVE-2025-32433In KEVPublic exploitFix availableEPSS 98.9%10.0 Critical
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...CVE-2025-32728Fix available4.3 Medium
- libvips, debian linux +1 morelibvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF outputCVE-2025-29769Fix available8.5 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- debian linux, linux kernel +1 moredrivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctlCVE-2025-21950Fix available7.1 High
- containerd, debian linux +1 morecontainerd has an integer overflow in User ID handlingCVE-2024-40635Public exploitFix available4.6 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: allow exp not to be removed in nf_ct_find_expectationCVE-2023-52927Public exploitFix available7.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions....CVE-2025-24201In KEVPublic exploitFix available10.0 Critical
- freetype, debian linux +1 moreAn out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font...CVE-2025-27363In KEVPublic exploitFix availableEPSS 27.8%8.1 High
- apache tomcat, debian linux, netapp bootstrap os +2 moreApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUTCVE-2025-24813In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel +1 morestaging: media: max96712: fix kernel oops when removing moduleCVE-2024-58054Fix available7.1 High
- djangoproject django, debian linux +1 moreDjango Vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2025-26699Fix available5.0 Medium
- pallets jinja, debian linux +1 moreJinja sandbox breakout through attr filter selecting format methodCVE-2025-27516Fix available5.4 Medium
- libreoffice, debian linux +1 moreMacro URL arbitrary script executionCVE-2025-1080Fix available7.2 High
- adacore ada web server, debian linux +1 moreWhen AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is...CVE-2024-55581Fix available7.4 High
- abseil abseil-cpp, common libraries, debian linux +2 moreHeap Buffer overflow in AbseilCVE-2025-0838Fix available5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- offis dcmtk, debian linux +1 moreA NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows...CVE-2025-25475Fix available7.5 High
- offis dcmtk, debian linux +1 moreDCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.CVE-2025-25474Fix available6.5 Medium
- offis dcmtk, debian linux +1 moreA buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service ...CVE-2025-25472Fix available5.3 Medium
- ffmpeg, debian linux +1 moreFFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the...CVE-2025-22921Fix available6.5 Medium
- f5 nginx, debian linux, f5 nginx open source +1 more +3 moreTLS Session Resumption VulnerabilityCVE-2025-23419Public exploitFix available5.3 Medium
- flightgear simgear, debian linux +1 moreIncorrect Authorization in SimGearCVE-2025-0781Fix available8.6 High
- Show moreLoading…