CVEs (10,001)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
3Debian FedoraprojectLibrecad3Debian Linux FedoraLibdxfrwJun 17, 2026 Nov 19, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can prov...Show more |
3Debian FedoraprojectLibrecad3Debian Linux FedoraLibdxfrwJun 17, 2026 Nov 19, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can pro...Show more |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
2Debian Wireshark2Debian Linux WiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
3Debian FedoraprojectVim3Debian Linux FedoraVimJun 17, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 vim is vulnerable to Heap-based Buffer Overflow |
3Debian FedoraprojectVim3Debian Linux FedoraVimJun 17, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free |
3Debian FedoraprojectRoundcube3Debian Linux FedoraWebmailJun 17, 2026 Nov 19, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params. |
3Debian FedoraprojectRoundcube3Debian Linux FedoraWebmailJun 17, 2026 Nov 19, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message. |
3Debian FedoraprojectWireshark3Debian Linux FedoraWiresharkJun 17, 2026 Nov 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file |
5Debian FedoraprojectLinux+2 more15Cloud Backup Communications Cloud Native Core Binding Support FunctionCommunications Cloud Native Core Network Exposure Function+12 moreJun 17, 2026 Nov 17, 2021 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic). |
4Debian FedoraprojectLinux+1 more11Cloud Backup Debian LinuxFedora+8 moreJun 17, 2026 Nov 17, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a...Show more |
3Debian LlhttpOracle3Debian Linux GraalvmLlhttpJun 17, 2026 Nov 15, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6. |
3Debian GmplibNetapp8Active Iq Unified Manager Debian LinuxGmp+5 moreJun 17, 2026 Nov 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms. |
2Debian Json Schema Project2Debian Linux Json SchemaJun 17, 2026 Nov 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
2Bluez Debian2Bluez Debian LinuxJun 17, 2026 Nov 12, 2021 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be fre...Show more |