debian
10,149 tracked vulnerabilities.
CVE-2020-26137
MEDIUM
urllib3 < 1.25.9 - CRLF Injection via HTTP Request Method
Sep 30, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-26117
HIGH
TigerVNC < 1.11.0 - Improper Certificate Validation
Sep 27, 2020
CVSS 8.1
EPSS 0.03
CVE-2020-26116
HIGH
Python 3.x < 3.5.10, 3.6.x < 3.6.12, 3.7.x < 3.7.9, 3.8.x < 3.8.5 - HTTP Header Injection via HTTPConnection.request
Sep 27, 2020
CVSS 7.2
EPSS 0.06
CVE-2020-25625
MEDIUM
QEMU 5.0.0 - Infinite Loop via TD List in hw/usb/hcd-ohci.c
Sep 25, 2020
CVSS 5.3
EPSS 0.00
CVE-2020-25085
MEDIUM
QEMU 5.0.0 - Heap-based Buffer Overflow in SDHC_BLKSIZE Write Operation
Sep 25, 2020
CVSS 5.0
EPSS 0.01
CVE-2020-25084
LOW
QEMU 5.0.0 - Use-After-Free in hw/usb/hcd-xhci.c
Sep 25, 2020
CVSS 3.2
EPSS 0.00
CVE-2020-26088
MEDIUM
Linux Kernel < 5.8.2 - Unauthenticated Raw Socket Creation via Missing CAP_NET_RAW Check
Sep 24, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25604
MEDIUM
Xen < 4.14.0 - Denial of Service via Timer Migration Race Condition
Sep 23, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-25603
HIGH
Xen < 4.14.0 - Denial of Service via Missing Memory Barriers in Event Channel Access
Sep 23, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-25602
MEDIUM
Xen 4.11.0-4.13.x - Denial of Service via MSR_MISC_ENABLE MSR Access
Sep 23, 2020
CVSS 6.0
EPSS 0.00
CVE-2020-25601
MEDIUM
Xen < 4.14.0 - Denial of Service via Event Channel Reset
Sep 23, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25600
MEDIUM
Xen 4.4.0-4.13.x - Out-of-bounds Write via Event Channel Allocation
Sep 23, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-25599
HIGH
Xen 4.5-4.14.x - Denial of Service and Privilege Escalation via evtchn_reset Race Condition
Sep 23, 2020
CVSS 7.0
EPSS 0.00
CVE-2020-25596
MEDIUM
Xen 3.2.0-4.14.x - Denial of Service via SYSENTER Instruction Handling
Sep 23, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-25595
HIGH
Xen < 4.14.0 - Denial of Service via PCI Passthrough Register Handling
Sep 23, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-25739
MEDIUM
gon < 6.4.0 - Cross-Site Scripting via MultiJson Escape Mode Bypass
Sep 23, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-14365
HIGH
Ansible Engine 2.8.0-2.8.14 and 2.9.0-2.9.12 - Improper Verification of Cryptographic Signature in DNF Module
Sep 23, 2020
CVSS 7.1
EPSS 0.00
CVE-2020-6576
HIGH
Google Chrome < 85.0.4183.102 - Use-After-Free in Offscreen Canvas
Sep 21, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6575
HIGH
Google Chrome < 85.0.4183.102 - Sandbox Escape via Mojo Race Condition
Sep 21, 2020
CVSS 8.3
EPSS 0.01
CVE-2020-6574
HIGH
Google Chrome < 85.0.4183.102 - Local Privilege Escalation via Crafted Binary
Sep 21, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-6573
CRITICAL
Google Chrome < 85.0.4183.102 - Use-After-Free in Video Component
Sep 21, 2020
CVSS 9.6
EPSS 0.02
CVE-2020-6571
MEDIUM
Google Chrome < 85.0.4183.83 - Domain Spoofing via IDN Homographs in Omnibox
Sep 21, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-6570
MEDIUM
Google Chrome < 85.0.4183.83 - Information Disclosure via WebRTC
Sep 21, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-6569
MEDIUM
Google Chrome < 85.0.4183.83 - Integer Overflow in WebUSB
Sep 21, 2020
CVSS 6.3
EPSS 0.01
CVE-2020-6568
MEDIUM
Google Chrome <85.0.4183.83 - Auth Bypass
Sep 21, 2020
CVSS 6.5
EPSS 0.02
Products
debian_linux 9,999
advanced_package_tool 21
dpkg 14
shadow 8
lintian 6
apt 5
devscripts 3
horde 3
reportbug 3
apt-cacher 2
aptlinex 2
cifs-utils 2
debusine 2
dpkg-dev 2
fsp 2
horde_groupware 2
mime-support 2
netkit 2
python-apt 2
python-dns 2
qpopper 2
xsabre 2
yubiserver 2
FreedomBox 1
adequate 1
amaya 1
apache 1
apache2 1
apt-listchanges 1
apt-setup 1
Quick Filters