debian
10,149 tracked vulnerabilities.
CVE-2020-15564
MEDIUM
Xen < 4.13.1 - Denial of Service via Misaligned VCPUOP_register_vcpu_info Hypercall
Jul 07, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-15563
MEDIUM
Xen 4.8.0-4.13.0 - Denial of Service via Dirty Video RAM Tracking
Jul 07, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-14303
HIGH
Samba < 4.10.17 - Denial of Service via Empty UDP Packet
Jul 06, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-15569
MEDIUM
MilkyTracker < 1.02.00 - Use-After-Free in PlayerGeneric Destructor
Jul 06, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-15562
MEDIUM
Roundcube Webmail < 1.2.11, 1.3.x < 1.3.14, 1.4.x < 1.4.7 - Stored Cross-Site Scripting via HTML Email xmlns Attribute
Jul 06, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-15466
HIGH
Wireshark 3.2.0-3.2.4 - Denial of Service via GVCP Dissector Infinite Loop
Jul 05, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-15469
LOW
QEMU 4.2.0 - Denial of Service via NULL Pointer Dereference in MemoryRegionOps
Jul 02, 2020
CVSS 2.3
EPSS 0.00
CVE-2020-8166
MEDIUM
rails < 5.2.5 and < 6.0.4 - Cross-Site Request Forgery via Per-Form Token Forgery
Jul 02, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-8163
HIGH
NUCLEI
Rails < 5.0.1 - Remote Code Execution via Render Locals Argument
Jul 02, 2020
CVSS 8.8
EPSS 0.82
CVE-2020-8161
HIGH
rack < 2.2.0 - Directory Traversal in Rack::Directory
Jul 02, 2020
CVSS 8.6
EPSS 0.04
CVE-2020-15503
HIGH
LibRaw < 0.20-RC1 - Heap-Based Buffer Overflow via Unvalidated Thumbnail Length
Jul 02, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-9498
MEDIUM
Apache Guacamole < 1.1.0 - Memory Corruption via RDP Static Virtual Channel
Jul 02, 2020
CVSS 6.7
EPSS 0.01
CVE-2020-9497
MEDIUM
Apache Guacamole < 1.1.0 - Information Disclosure via RDP Static Virtual Channel Data
Jul 02, 2020
CVSS 4.4
EPSS 0.01
CVE-2020-15476
HIGH
ntop nDPI < 3.2 - Heap-Based Buffer Over-Read in Oracle Protocol Dissector
Jul 01, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-15472
CRITICAL
ntop nDPI < 3.2 - Out-of-bounds Read in H.323 Dissector
Jul 01, 2020
CVSS 9.1
EPSS 0.01
CVE-2020-15393
MEDIUM
Linux kernel <5.7.6 - Memory Corruption
Jun 29, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-15389
MEDIUM
OpenJPEG < 2.3.1 - Use-After-Free in opj_decompress.c
Jun 29, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-4067
HIGH
coturn < 4.5.1.3 - Information Disclosure via Uninitialized STUN/TURN Response Buffer
Jun 29, 2020
CVSS 7.0
EPSS 0.02
CVE-2020-11996
HIGH
Apache Tomcat <10.0.0-M6, <9.0.36, <8.5.56 - DoS
Jun 26, 2020
CVSS 7.5
EPSS 0.27
CVE-2020-15306
MEDIUM
OpenEXR < 2.5.2 - Heap Buffer Overflow via Invalid ChunkCount Attribute
Jun 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-15305
MEDIUM
OpenEXR < 2.5.2 - Use-After-Free in DeepScanLineInputFile
Jun 26, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-10177
MEDIUM
Pillow < 7.1.0 - Out-of-bounds Read in FliDecode
Jun 25, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-15005
LOW
MediaWiki <1.31.8-1.34.2 - Info Disclosure
Jun 24, 2020
CVSS 3.1
EPSS 0.01
CVE-2020-9494
HIGH
Apache Traffic Server < 6.2.3 - Resource Allocation Without Limits
Jun 24, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-12865
HIGH
SANE Backends <1.0.30 - Buffer Overflow
Jun 24, 2020
CVSS 8.0
EPSS 0.01
Products
debian_linux 9,999
advanced_package_tool 21
dpkg 14
shadow 8
lintian 6
apt 5
devscripts 3
horde 3
reportbug 3
apt-cacher 2
aptlinex 2
cifs-utils 2
debusine 2
dpkg-dev 2
fsp 2
horde_groupware 2
mime-support 2
netkit 2
python-apt 2
python-dns 2
qpopper 2
xsabre 2
yubiserver 2
FreedomBox 1
adequate 1
amaya 1
apache 1
apache2 1
apt-listchanges 1
apt-setup 1
Quick Filters