Debian
Page 15 of 100 — Debian CVEs from a corpus of 10223, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-40567 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Wri… |
CVE-2023-40188 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Rea… |
CVE-2023-40186 | Medium | 6.5 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an IntegerOverflow l… |
CVE-2023-40181 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Integer-Underflow… |
CVE-2023-39356 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a missing offset validation may… |
CVE-2023-39353 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a missing offset val… |
CVE-2023-39352 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an invalid offset va… |
CVE-2023-39355 | High | 7.0 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of FreeRDP on the 3.x release branch before… |
CVE-2023-39354 | Medium | 5.9 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to an Out-Of-Bounds Rea… |
CVE-2023-39351 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Po… |
CVE-2023-39350 | Medium | 5.9 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. Integer underflow le… |
CVE-2023-40589 | Medium | 4.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflo… |
CVE-2023-20900 | High | 7.1 | 2023-08-31 | A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A… |
CVE-2023-4572 | High | 8.8 | 2023-08-29 | Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-38802 | High | 7.5 | 2023-08-29 | FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribut… |
CVE-2023-41361 | Critical | 9.8 | 2023-08-29 | An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version. |
CVE-2023-41360 | Critical | 9.1 | 2023-08-29 | An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation. |
CVE-2023-41358 | High | 7.5 | 2023-08-29 | An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. |
CVE-2023-4569 | Medium | 5.5 | 2023-08-28 | A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause dou… |
CVE-2020-24165 | High | 8.8 | 2023-08-28 | An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service… |
CVE-2023-41080 | Medium | 6.1 | 2023-08-25 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1… |
CVE-2023-40577 | High | 7.5 | 2023-08-25 | Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/… |
CVE-2023-4431 | High | 8.1 | 2023-08-23 | Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted H… |
CVE-2023-4430 | High | 8.8 | 2023-08-23 | Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-4429 | High | 8.8 | 2023-08-23 | Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-4428 | High | 8.1 | 2023-08-23 | Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTM… |
CVE-2022-48566 | Medium | 5.9 | 2023-08-22 | An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variab… |
CVE-2022-48565 | Critical | 9.8 | 2023-08-22 | An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoi… |
CVE-2022-48560 | High | 7.5 | 2023-08-22 | A use-after-free exists in Python through 3.9 via heappushpop in heapq. |
CVE-2022-48554 | Medium | 5.5 | 2023-08-22 | File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project. |
CVE-2022-48174 | Critical | 9.8 | 2023-08-22 | There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed fr… |
CVE-2022-44730 | Medium | 4.4 | 2023-08-22 | Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A… |
CVE-2022-44729 | High | 7.1 | 2023-08-22 | Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. O… |
CVE-2022-37051 | Medium | 6.5 | 2023-08-22 | An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream… |
CVE-2022-37050 | Medium | 6.5 | 2023-08-22 | In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in… |
CVE-2020-35357 | Medium | 6.5 | 2023-08-22 | A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing… |
CVE-2020-23804 | High | 7.5 | 2023-08-22 | Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. |
CVE-2020-22217 | Medium | 5.9 | 2023-08-22 | Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. |
CVE-2020-19189 | Medium | 6.5 | 2023-08-22 | Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service v… |
CVE-2023-37369 | High | 7.5 | 2023-08-20 | In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string th… |
CVE-2023-4368 | High | 8.8 | 2023-08-15 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2023-4367 | Medium | 6.5 | 2023-08-15 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2023-4366 | High | 8.8 | 2023-08-15 | Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2023-4365 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page… |
CVE-2023-4364 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTM… |
CVE-2023-4363 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via… |
CVE-2023-4362 | High | 8.8 | 2023-08-15 | Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control… |
CVE-2023-4361 | Medium | 5.3 | 2023-08-15 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a cra… |
CVE-2023-4360 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chro… |
CVE-2023-4359 | Medium | 5.3 | 2023-08-15 | Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the secu… |
CVE-2023-4358 | High | 8.8 | 2023-08-15 | Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-4357 | High | 8.8 | 2023-08-15 | Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a cr… |
CVE-2023-4356 | High | 8.8 | 2023-08-15 | Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to pote… |
CVE-2023-4355 | High | 8.8 | 2023-08-15 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2023-4354 | High | 8.8 | 2023-08-15 | Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-4353 | High | 8.8 | 2023-08-15 | Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-4352 | High | 8.8 | 2023-08-15 | Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-4351 | High | 8.8 | 2023-08-15 | Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap cor… |
CVE-2023-4350 | Medium | 6.5 | 2023-08-15 | Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of th… |
CVE-2023-4349 | High | 8.8 | 2023-08-15 | Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2023-40283 | High | 7.8 | 2023-08-14 | An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children o… |
CVE-2023-39949 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper… |
CVE-2023-39948 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `Ba… |
CVE-2023-39947 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-39946 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-39945 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.0, 2.10.2, 2.9.2, an… |
CVE-2023-39534 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5… |
CVE-2023-39418 | Low | 3.1 | 2023-08-11 | A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SE… |
CVE-2023-39417 | High | 7.5 | 2023-08-11 | IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construc… |
CVE-2023-3824 | Critical | 9.4 | 2023-08-11 | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient le… |
CVE-2023-3823 | High | 8.6 | 2023-08-11 | In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration varia… |
CVE-2023-23908 | Medium | 6.0 | 2023-08-11 | Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure vi… |
CVE-2022-46329 | High | 8.2 | 2023-08-11 | Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2022-41804 | High | 7.2 | 2023-08-11 | Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation… |
CVE-2022-40982 | Medium | 6.5 | 2023-08-11 | Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an aut… |
CVE-2022-40964 | High | 7.9 | 2023-08-11 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of pri… |
CVE-2022-38076 | Low | 3.8 | 2023-08-11 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation o… |
CVE-2022-36351 | Medium | 4.3 | 2023-08-11 | Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of… |
CVE-2022-27635 | High | 8.2 | 2023-08-11 | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of pri… |
CVE-2023-4273 | Medium | 6.0 | 2023-08-09 | A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is res… |
CVE-2023-20588 | Medium | 5.5 | 2023-08-08 | A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. |
CVE-2023-20569 | Medium | 4.7 | 2023-08-08 | A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execut… |
CVE-2023-36054 | Medium | 6.5 | 2023-08-07 | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can tr… |
CVE-2023-4194 | Medium | 5.5 | 2023-08-07 | A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to som… |
CVE-2023-4147 | High | 7.8 | 2023-08-07 | A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to cras… |
CVE-2023-4132 | Medium | 5.5 | 2023-08-03 | A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is p… |
CVE-2023-3180 | Medium | 6.0 | 2023-08-03 | A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for th… |
CVE-2023-4073 | High | 8.8 | 2023-08-03 | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a cra… |
CVE-2023-38559 | Medium | 5.5 | 2023-08-01 | A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of ser… |
CVE-2023-4056 | Critical | 9.8 | 2023-08-01 | Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence… |
CVE-2023-4055 | High | 7.5 | 2023-08-01 | When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie j… |
CVE-2023-4050 | High | 7.5 | 2023-08-01 | In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could h… |
CVE-2023-4049 | Medium | 5.9 | 2023-08-01 | Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilit… |
CVE-2023-4048 | High | 7.5 | 2023-08-01 | An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 11… |
CVE-2023-4047 | High | 8.8 | 2023-08-01 | A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affect… |
CVE-2023-4046 | Medium | 5.3 | 2023-08-01 | In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially… |
CVE-2023-4045 | Medium | 5.3 | 2023-08-01 | Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin po… |
CVE-2023-4004 | High | 7.8 | 2023-07-31 | A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_E… |
CVE-2022-4907 | High | 8.8 | 2023-07-29 | Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pag… |
CVE-2023-3773 | Medium | 5.5 | 2023-07-25 | A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privile… |