CVEs (10,001)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
3Debian FedoraprojectGoogle3Chrome Debian LinuxFedoraJun 17, 2026 Jan 8, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
3Debian FedoraprojectGoogle3Chrome Debian LinuxFedoraJun 17, 2026 Jan 8, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
3Debian FedoraprojectGoogle3Chrome Debian LinuxFedoraJun 17, 2026 Jan 8, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
3Debian FedoraprojectGoogle3Chrome Debian LinuxFedoraJun 17, 2026 Jan 8, 2021 N/A· v4 9.6 CRITICAL· v3 9.3 HIGH· v2 Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
3Debian FedoraprojectGoogle3Chrome Debian LinuxFedoraJun 17, 2026 Jan 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic. |
2Debian Videolan2Debian Linux Vlc Media PlayerJul 9, 2026 Jan 8, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file. |
2Debian Nvidia2Debian Linux Gpu DriverJun 17, 2026 Jan 8, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level...Show more |
2Debian Mozilla2Debian Linux FirefoxJun 17, 2026 Jan 7, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure co...Show more |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 7, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 7, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 7, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS. |
4Debian FasterxmlNetapp+1 more43Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+40 moreJun 17, 2026 Jan 7, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. |
4Debian FasterxmlNetapp+1 more40Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+37 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource. |
4Debian FasterxmlNetapp+1 more45Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. |
4Debian FasterxmlNetapp+1 more44Agile Plm Application Testing SuiteAutovue For Agile Product Lifecycle Management+41 moreJun 17, 2026 Jan 6, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS. |
5Debian FedoraprojectNodejs+2 more5Debian Linux FedoraGraalvm+2 moreJun 17, 2026 Jan 6, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field...Show more |