debian
10,149 tracked vulnerabilities.
CVE-2020-13428
HIGH
VideoLAN VLC media player <3.0.11 - Buffer Overflow
Jun 08, 2020
CVSS 7.8
EPSS 0.02
CVE-2020-13696
MEDIUM
xawtv < 3.107 - Unauthenticated Arbitrary File Access via v4l-conf Device Path Manipulation
Jun 08, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-13625
HIGH
PHPMailer < 6.1.6 - Improper Output Escaping in File Attachment Name
Jun 08, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-12695
HIGH
Open Connectivity Foundation UPnP <2020-04-17 - SSRF
Jun 08, 2020
CVSS 7.5
EPSS 0.15
CVE-2020-13904
MEDIUM
FFmpeg 2.8 and 4.2.3 - Use-After-Free via Crafted EXTINF Duration in m3u8 File
Jun 07, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-13881
HIGH
pam_tacplus 1.3.8-1.5.1 - Sensitive Information Disclosure in Debug Logging
Jun 06, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-13871
HIGH
SQLite 3.32.2 - Use-After-Free in Window Function Parse Tree Rewrite
Jun 06, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-13848
HIGH
libupnp < 1.12.1 - Denial of Service via Crafted SSDP Message
Jun 04, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-13765
MEDIUM
QEMU 4.0-4.1.0 - Out-of-bounds Write via Invalid Memory Copy in rom_copy()
Jun 04, 2020
CVSS 5.6
EPSS 0.02
CVE-2020-13692
HIGH
PostgreSQL JDBC Driver < 42.2.13 - XML External Entity Injection
Jun 04, 2020
CVSS 7.7
EPSS 0.04
CVE-2020-13777
HIGH
GnuTLS 3.6.4-3.6.13 - Use of a Broken or Risky Cryptographic Algorithm in Session Ticket Encryption
Jun 04, 2020
CVSS 7.4
EPSS 0.18
CVE-2020-6498
MEDIUM
Google Chrome on iOS < 83.0.4103.88 - Domain Spoofing via Crafted HTML Page
Jun 03, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-6497
MEDIUM
Google Chrome on iOS < 83.0.4103.88 - Domain Spoofing via Crafted URI
Jun 03, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-6496
HIGH
Google Chrome < 83.0.4103.97 - Use-After-Free in Payments
Jun 03, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-6495
MEDIUM
Google Chrome < 83.0.4103.97 - Sandbox Escape via Malicious Extension
Jun 03, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-6494
MEDIUM
Google Chrome < 83.0.4103.97 - Security UI Spoofing via Omnibox Manipulation
Jun 03, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-6493
CRITICAL
Chrome < 83.0.4103.97 - Use-After-Free in WebAuthentication
Jun 03, 2020
CVSS 9.6
EPSS 0.02
CVE-2020-11080
LOW
nghttp2 < 1.41.0 - Denial of Service via Large HTTP/2 SETTINGS Frame Payload
Jun 03, 2020
CVSS 3.7
EPSS 0.05
CVE-2020-13596
MEDIUM
Django 2.2-2.2.13 - Cross-Site Scripting via ForeignKeyRawIdWidget Query Parameters
Jun 03, 2020
CVSS 6.1
EPSS 0.03
CVE-2020-13254
MEDIUM
Django <2.2.13, <3.0.7 - Info Disclosure
Jun 03, 2020
CVSS 5.9
EPSS 0.06
CVE-2020-7663
HIGH
websocket-extensions < 0.1.5 - Denial of Service via Regex Backtracking in Header Parser
Jun 02, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-13754
MEDIUM
QEMU 4.2.0 - Out-of-Bounds Memory Access via MSI-X MMIO Operation
Jun 02, 2020
CVSS 6.7
EPSS 0.00
CVE-2020-13401
MEDIUM
Docker Engine < 19.03.11 - IPv6 Router Advertisement Spoofing via CAP_NET_RAW
Jun 02, 2020
CVSS 6.0
EPSS 0.03
CVE-2020-13659
LOW
QEMU 4.2.0 - NULL Pointer Dereference in address_space_map
Jun 02, 2020
CVSS 2.5
EPSS 0.00
CVE-2020-12867
MEDIUM
sane_backends < 1.0.30 - Denial of Service via NULL Pointer Dereference in sanei_epson_net_read
Jun 01, 2020
CVSS 5.5
EPSS 0.00
Products
debian_linux 9,999
advanced_package_tool 21
dpkg 14
shadow 8
lintian 6
apt 5
devscripts 3
horde 3
reportbug 3
apt-cacher 2
aptlinex 2
cifs-utils 2
debusine 2
dpkg-dev 2
fsp 2
horde_groupware 2
mime-support 2
netkit 2
python-apt 2
python-dns 2
qpopper 2
xsabre 2
yubiserver 2
FreedomBox 1
adequate 1
amaya 1
apache 1
apache2 1
apt-listchanges 1
apt-setup 1
Quick Filters