CVEs (10,011)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
2Debian Libvncserver Project2Debian Linux LibvncserverJun 17, 2026 Sep 2, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). |
2Debian Owasp2Debian Linux Owasp Modsecurity Core Rule SetJun 17, 2026 Sep 2, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF prot...Show more |
2Debian Linux2Debian Linux Linux KernelOct 14, 2026 Sep 2, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain. |
2Debian Linux2Debian Linux Linux KernelOct 14, 2026 Sep 2, 2022 N/A· v4 4.7 MEDIUM· v3 N/A· v2 An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries....Show more |
3Bluez CanonicalDebian3Bluez Debian LinuxUbuntu LinuxJun 17, 2026 Sep 2, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c. |
3Bluez CanonicalDebian3Bluez Debian LinuxUbuntu LinuxJun 17, 2026 Sep 2, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len. |
2Debian Linux2Debian Linux Linux KernelOct 14, 2026 Sep 1, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with n...Show more |
2Debian Linux2Debian Linux Linux KernelJun 17, 2026 Sep 1, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error. |
2Debian Python Scciclient Project2Debian Linux Python ScciclientJun 17, 2026 Sep 1, 2022 N/A· v4 7.4 HIGH· v3 N/A· v2 A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks. |
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file. |
In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field. |
In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file. |
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file. |
3Debian FedoraprojectLinux3Debian Linux FedoraLinux KernelOct 14, 2026 Aug 31, 2022 N/A· v4 7.0 HIGH· v3 N/A· v2 A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentiall...Show more |
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted i...Show more |
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input. |
There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 |
4Debian FedoraprojectLinux+1 more4Debian Linux Enterprise LinuxFedora+1 moreOct 14, 2026 Aug 31, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unp...Show more |
4Debian DpdkFedoraproject+1 more8Data Plane Development Kit Debian LinuxEnterprise Linux+5 moreJun 17, 2026 Aug 31, 2022 N/A· v4 8.6 HIGH· v3 N/A· v2 A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK. |
5Debian FedoraprojectLibtiff+2 more5Debian Linux Enterprise LinuxFedora+2 moreJun 17, 2026 Aug 31, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting...Show more |