debian

10,149 tracked vulnerabilities.

CVE-2020-27218 MEDIUM
Eclipse Jetty 9.4.0-9.4.34 - Sensitive Information Exposure via GZIP Request Body Reuse
Nov 28, 2020
CVSS 4.8
EPSS 0.08
CVE-2020-27746 LOW
Slurm < 19.05.8 and 20.x < 20.02.6 - Sensitive Information Exposure via X11 Magic Cookie Race Condition
Nov 27, 2020
CVSS 3.7
EPSS 0.01
CVE-2020-25708 HIGH
libvncserver 0.9.12 - Denial of Service via Divide By Zero
Nov 27, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-27745 CRITICAL
Slurm < 19.05.8 and 20.x < 20.02.6 - Buffer Overflow in PMIx MPI Plugin
Nov 27, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-29130 MEDIUM
libslirp < 4.3.1 - Out-of-bounds Read in slirp.c
Nov 26, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-29129 MEDIUM
libslirp < 4.3.1 - Out-of-bounds Read in ncsi.c
Nov 26, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-25653 MEDIUM
spice-vdagent < 0.20.0 - Race Condition via Client Connection Handling
Nov 26, 2020
CVSS 6.3
EPSS 0.00
CVE-2020-25652 MEDIUM
spice-vdagent < 0.20.0 - Unauthenticated Denial of Service via UNIX Domain Socket
Nov 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25651 MEDIUM
spice-vdagent < 0.20.0 - Race Condition in File Transfer Protocol
Nov 26, 2020
CVSS 6.4
EPSS 0.00
CVE-2020-29074 HIGH
x11vnc 0.9.16 - Incorrect Permission Assignment for Shared Memory Segment
Nov 25, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-25650 MEDIUM
spice-vdagent < 0.20.0 - Denial of Service via File Transfer Handling
Nov 25, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-26237 MEDIUM
highlight.js < 9.18.2 - Prototype Pollution via Malicious HTML Code Block
Nov 24, 2020
CVSS 5.8
EPSS 0.01
CVE-2020-25654 HIGH
Pacemaker < 1.1.23 - ACL Bypass via IPC Communication
Nov 24, 2020
CVSS 7.2
EPSS 0.02
CVE-2020-28928 MEDIUM
musl libc < 1.2.1 - Out-of-bounds Write in wcsnrtombs
Nov 24, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-28984 CRITICAL
SPIP < 3.2.8 - Cross-Site Scripting via Preference Form Parameters
Nov 23, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-25696 HIGH
PostgreSQL < 9.5.24 - Remote Code Execution via \gset in psql Interactive Terminal
Nov 23, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-28896 MEDIUM
Mutt < 2.0.2 and NeoMutt < 2020-11-20 - Unencrypted Credential Exposure via Invalid IMAP Server Response
Nov 23, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-0569 MEDIUM
Intel WiFi Firmware < 21.70 - Authenticated Denial of Service via Out-of-bounds Write
Nov 23, 2020
CVSS 5.7
EPSS 0.01
CVE-2020-20740 HIGH
pdfresurrect < 0.20 - Heap-Based Buffer Overflow in pdf_get_version()
Nov 20, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-20739 MEDIUM
libvips < 8.8.2 - Information Disclosure via Uninitialized Variable in im_vips2dz
Nov 20, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-28974 MEDIUM
Linux Kernel < 5.9.7 - Out-of-bounds Read in fbcon via KD_FONT_OP_COPY
Nov 20, 2020
CVSS 5.0
EPSS 0.01
CVE-2020-19667 HIGH
ImageMagick - Stack-based Buffer Overflow in ReadXPMImage
Nov 20, 2020
CVSS 7.8
EPSS 0.02
CVE-2020-28949 HIGH KEV
Archive_Tar <1.4.10 - Code Injection
Nov 19, 2020
CVSS 7.8
EPSS 0.85
CVE-2020-28948 HIGH
Archive_Tar < 1.4.11 - Deserialization of Untrusted Data via PHAR Case Bypass
Nov 19, 2020
CVSS 7.8
EPSS 0.47
CVE-2020-28941 MEDIUM
Linux Kernel < 5.9.9 - Use-After-Free in Speakup TTY Line Discipline
Nov 19, 2020
CVSS 5.5
EPSS 0.00