debian
10,149 tracked vulnerabilities.
CVE-2020-0034
HIGH
Android 8.0-8.1 - Out-of-bounds Read in vp8_decode_frame
Mar 10, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-5258
HIGH
dojo < 1.11.10 - Prototype Pollution via deepCopy Method
Mar 10, 2020
CVSS 7.7
EPSS 0.04
CVE-2020-10232
CRITICAL
The Sleuth Kit < 4.8.0 - Stack Buffer Overflow in YAFFS File Timestamp Parsing
Mar 09, 2020
CVSS 9.8
EPSS 0.02
CVE-2020-10188
CRITICAL
Juniper Junos - Remote Code Execution via Buffer Overflow in telnetd utility.c
Mar 06, 2020
CVSS 9.8
EPSS 0.75
CVE-2020-9402
HIGH
NUCLEI
Django 1.11-1.11.28, 2.2-2.2.10, 3.0-3.0.3 - SQL Injection via GIS Tolerance Parameter
Mar 05, 2020
CVSS 8.8
EPSS 0.23
CVE-2020-8659
HIGH
CNCF Envoy <1.13.0 - Memory Corruption
Mar 04, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-10029
MEDIUM
glibc < 2.32 - Out-of-bounds Write in Long Double Range Reduction
Mar 04, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-10018
CRITICAL
WebKitGTK and WPE WebKit < 2.28.0 - Use-After-Free
Mar 02, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-9549
HIGH
PDFResurrect 0.12-0.19 - Out-of-bounds Write via Crafted PDF Document
Mar 02, 2020
CVSS 7.8
EPSS 0.01
CVE-2020-9548
CRITICAL
NUCLEI
jackson-databind 2.0.0-2.7.9.7 - Deserialization of Untrusted Data via anteros-core Gadget
Mar 02, 2020
CVSS 9.8
EPSS 0.18
CVE-2020-9547
CRITICAL
NUCLEI
jackson-databind 2.0.0-2.7.9.7 - Deserialization of Untrusted Data via com.ibatis.sqlmap Gadget
Mar 02, 2020
CVSS 9.8
EPSS 0.19
CVE-2020-9546
CRITICAL
jackson-databind 2.7.0-2.7.9.6 - Deserialization of Untrusted Data via HikariConfig Gadget
Mar 02, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-5247
MEDIUM
Puma < 3.12.3 - HTTP Response Splitting via Header Injection
Feb 28, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-9431
HIGH
Wireshark 2.6.0-2.6.14, 3.0.0-3.0.8, 3.2.0-3.2.1 - Use-After-Free in LTE RRC Dissector
Feb 27, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-9430
HIGH
Wireshark 2.6.0-2.6.14, 3.0.0-3.0.8, 3.2.0-3.2.1 - Denial of Service in WiMax DLMAP Dissector
Feb 27, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-9428
HIGH
Wireshark 2.6.0-2.6.14, 3.0.0-3.0.8, 3.2.0-3.2.1 - Denial of Service in EAP Dissector
Feb 27, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-6418
HIGH
KEV
Google Chrome <80.0.3987.122 - Heap Corruption
Feb 27, 2020
CVSS 8.8
EPSS 0.79
CVE-2020-6386
HIGH
Google Chrome <80.0.3987.116 - Use After Free
Feb 27, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6384
HIGH
Google Chrome <80.0.3987.116 - Use After Free
Feb 27, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-6383
HIGH
Google Chrome <80.0.3987.116 - Heap Corruption
Feb 27, 2020
CVSS 8.8
EPSS 0.06
CVE-2020-7063
MEDIUM
PHP <7.2.28-7.3.15-7.4.3 - Info Disclosure
Feb 27, 2020
CVSS 5.5
EPSS 0.02
CVE-2020-7062
HIGH
PHP 7.2.0-7.2.27, 7.3.0-7.3.14, 7.4.0-7.4.2 - Denial of Service via File Upload Progress Cleanup
Feb 27, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-9274
HIGH
NUCLEI
Pure-FTPd < 1.0.50 - Use-After-Free in diraliases Linked List
Feb 26, 2020
CVSS 7.5
EPSS 0.06
CVE-2020-8794
CRITICAL
OpenSMTPD OOB Read Local Privilege Escalation
Feb 25, 2020
CVSS 9.8
EPSS 0.89
CVE-2020-9383
HIGH
Linux Kernel 3.16-5.5.6 - Out-of-bounds Read in Floppy Disk Driver
Feb 25, 2020
CVSS 7.1
EPSS 0.01
Products
debian_linux 9,999
advanced_package_tool 21
dpkg 14
shadow 8
lintian 6
apt 5
devscripts 3
horde 3
reportbug 3
apt-cacher 2
aptlinex 2
cifs-utils 2
debusine 2
dpkg-dev 2
fsp 2
horde_groupware 2
mime-support 2
netkit 2
python-apt 2
python-dns 2
qpopper 2
xsabre 2
yubiserver 2
FreedomBox 1
adequate 1
amaya 1
apache 1
apache2 1
apt-listchanges 1
apt-setup 1
Quick Filters