debian

10,149 tracked vulnerabilities.

CVE-2022-21277 MEDIUM
Oracle GraalVM 20.3.4, 21.3.0 and Oracle JDK 11.0.13, 17.0.1 - Unauthenticated Partial Denial of Service in ImageIO
Jan 19, 2022
CVSS 5.3
EPSS 0.03
CVE-2022-21248 LOW
Oracle Java SE <17.0.1 - Serialization
Jan 19, 2022
CVSS 3.7
EPSS 0.04
CVE-2022-0261 HIGH
vim < 8.2.4120 - Heap-based Buffer Overflow
Jan 18, 2022
CVSS 7.8
EPSS 0.02
CVE-2022-0235 MEDIUM
node-fetch < 2.6.7 and >=3.0.0 <3.1.1 - Open Redirect via URL Validation Bypass
Jan 16, 2022
CVSS 6.1
EPSS 0.02
CVE-2022-23094 HIGH
Libreswan 4.2-4.5 - Denial of Service via Crafted IKEv1 Packet
Jan 15, 2022
CVSS 7.5
EPSS 0.03
CVE-2022-0213 MEDIUM
vim < 8.2 - Heap-based Buffer Overflow
Jan 14, 2022
CVSS 6.6
EPSS 0.01
CVE-2022-23222 HIGH
Linux Kernel 5.8.0-5.15.14 - Local Privilege Escalation via BPF Verifier Pointer Arithmetic
Jan 14, 2022
CVSS 7.8
EPSS 0.02
CVE-2022-23219 CRITICAL
glibc < 2.31 - Buffer Overflow in clnt_create Hostname Handling
Jan 14, 2022
CVSS 9.8
EPSS 0.04
CVE-2022-23218 CRITICAL
glibc <= 2.34 - Buffer Overflow in svcunix_create
Jan 14, 2022
CVSS 9.8
EPSS 0.05
CVE-2022-20698 HIGH
ClamAV < 0.103.5 and 0.104.0-0.104.1 - Denial of Service via OOXML Parsing
Jan 14, 2022
CVSS 7.5
EPSS 0.03
CVE-2022-21682 HIGH
Flatpak < 1.12.3 and < 1.10.6 - Path Traversal via --mirror-screenshots-url
Jan 13, 2022
CVSS 7.7
EPSS 0.02
CVE-2022-23134 LOW KEVNUCLEI
Zabbix 5.4.0-5.4.7 - Unauthenticated Improper Access Control in Setup.php
Jan 13, 2022
CVSS 3.7
EPSS 0.85
CVE-2022-22844 MEDIUM
LibTIFF 4.3.0 - Out-of-bounds Read in _TIFFmemcpy
Jan 10, 2022
CVSS 5.5
EPSS 0.01
CVE-2022-22827 HIGH
libexpat < 2.4.3 - Integer Overflow in storeAtts
Jan 10, 2022
CVSS 8.8
EPSS 0.03
CVE-2022-22826 HIGH
libexpat < 2.4.3 - Integer Overflow in nextScaffoldPart
Jan 10, 2022
CVSS 8.8
EPSS 0.03
CVE-2022-22825 HIGH
libexpat < 2.4.3 - Integer Overflow in xmlparse.c Lookup
Jan 10, 2022
CVSS 8.8
EPSS 0.03
CVE-2022-22824 CRITICAL
libexpat < 2.4.3 - Integer Overflow in defineAttribute
Jan 10, 2022
CVSS 9.8
EPSS 0.03
CVE-2022-22823 CRITICAL
libexpat < 2.4.3 - Integer Overflow in build_model Function
Jan 10, 2022
CVSS 9.8
EPSS 0.03
CVE-2022-22822 CRITICAL
libexpat < 2.4.3 - Integer Overflow in addBinding
Jan 10, 2022
CVSS 9.8
EPSS 0.05
CVE-2022-22817 CRITICAL
Pillow < 9.0.1 - Remote Code Execution via ImageMath.eval Expression Injection
Jan 10, 2022
CVSS 9.8
EPSS 0.03
CVE-2022-22816 MEDIUM
Pillow < 9.0.0 - Out-of-bounds Read in ImagePath.Path Initialization
Jan 10, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-22815 MEDIUM
Pillow < 9.0.0 - Improper Initialization in ImagePath.Path
Jan 10, 2022
CVSS 6.5
EPSS 0.03
CVE-2022-21664 HIGH
WordPress < 5.8.3 - SQL Injection
Jan 06, 2022
CVSS 7.4
EPSS 0.04
CVE-2022-21663 MEDIUM
WordPress < 5.8.3 - Authenticated Object Injection via Multisite Super Admin Role
Jan 06, 2022
CVSS 6.6
EPSS 0.04
CVE-2022-21662 HIGH
WordPress < 5.8.3 - Authenticated Stored Cross-Site Scripting
Jan 06, 2022
CVSS 8.0
EPSS 0.64