← Back

Debian Linux

debian_linux

Vendor: Debian • 10,002 CVEs

CVEs (10,002)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-0049
3Debian
FedoraprojectOpenttd
3Debian Linux
FedoraOpenttd
Nov 21, 2024
Nov 7, 2019
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
CVE-2019-18809
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Nov 7, 2019
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVE-2019-18804
5Canonical
DebianDjvulibre Project+2 more
5Debian Linux
DjvulibreFedora+2 more
Jun 17, 2026
Nov 7, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
CVE-2009-5046
2Debian
Eclipse
2Debian Linux
Jetty
Nov 21, 2024
Nov 6, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.
CVE-2009-5045
2Debian
Eclipse
2Debian Linux
Jetty
Nov 21, 2024
Nov 6, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dump Servlet information leak in jetty before 6.1.22.
CVE-2009-5049
2Debian
Mortbay
2Debian Linux
Jetty
Nov 21, 2024
Nov 6, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVE-2010-2471
2Debian
Drupal
2Debian Linux
Drupal
Nov 21, 2024
Nov 6, 2019
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
Drupal versions 5.x and 6.x has open redirection
CVE-2011-4900
2Debian
Typo3
2Debian Linux
Typo3
Nov 21, 2024
Nov 6, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
TYPO3 before 4.5.4 allows Information Disclosure in the backend.
CVE-2011-4625
2Debian
Simplesamlphp
2Debian Linux
Simplesamlphp
Nov 21, 2024
Nov 6, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.
CVE-2007-0899
2Clamav
Debian
2Clamav
Debian Linux
Nov 21, 2024
Nov 6, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
CVE-2006-4245
2Archivemail Project
Debian
2Archivemail
Debian Linux
Nov 21, 2024
Nov 6, 2019
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.
CVE-2019-5068
4Canonical
DebianMesa3d+1 more
4Debian Linux
LeapMesa+1 more
Jun 17, 2026
Nov 5, 2019
N/A· v4
4.4 MEDIUM· v3
3.6 LOW· v2
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnera...Show more
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.Show less
CVE-2013-5123
5Debian
FedoraprojectPypa+2 more
6Debian Linux
FedoraOpenshift+3 more
Nov 21, 2024
Nov 5, 2019
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
CVE-2010-3674
2Debian
Typo3
2Debian Linux
Typo3
Nov 21, 2024
Nov 5, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
TYPO3 before 4.4.1 allows XSS in the frontend search box.
CVE-2013-6275
2Debian
Horde
2Debian Linux
Groupware
Nov 21, 2024
Nov 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
CVE-2013-6461
3Debian
NokogiriRedhat
7Cloudforms Management Engine
Debian LinuxEnterprise Mrg+4 more
Nov 21, 2024
Nov 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
CVE-2013-6460
3Debian
NokogiriRedhat
7Cloudforms Management Engine
Debian LinuxEnterprise Mrg+4 more
Nov 21, 2024
Nov 5, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
CVE-2016-1000002
4Debian
GnomeOpensuse+1 more
4Debian Linux
Enterprise LinuxGnome Display Manager+1 more
Nov 21, 2024
Nov 5, 2019
N/A· v4
2.4 LOW· v3
2.1 LOW· v2
gdm3 3.14.2 and possibly later has an information leak before screen lock
CVE-2013-6365
3Debian
HordeOpensuse
3Debian Linux
GroupwareOpensuse
Nov 21, 2024
Nov 5, 2019
N/A· v4
5.3 MEDIUM· v3
2.6 LOW· v2
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions
CVE-2013-6364
2Debian
Horde
2Debian Linux
Groupware
Nov 21, 2024
Nov 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book