Debian Linux

debian_linux

Vendor: Debian • 10,001 CVEs

CVEs (10,001)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15574 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment.
CVE-2017-15573 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content.
CVE-2017-15572 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.
CVE-2017-15571 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data.
CVE-2017-15570 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data.
CVE-2017-15569 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list.
CVE-2017-15568 2Debian Redmine 2Debian Linux Redmine May 13, 2026 Oct 18, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history.
CVE-2017-15565 2Debian Freedesktop 2Debian Linux Poppler May 13, 2026 Oct 17, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.
CVE-2017-13088 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attac...Show more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.Show less
CVE-2017-13087 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within...Show more Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.Show less
CVE-2017-13086 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 6.8 MEDIUM· v3 5.4 MEDIUM· v2 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVE-2017-13084 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 6.8 MEDIUM· v3 5.4 MEDIUM· v2 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof fra...Show more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.Show less
CVE-2017-13082 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within ra...Show more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.Show less
CVE-2017-13081 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames fr...Show more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.Show less
CVE-2017-13080 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVE-2017-13079 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames fro...Show more Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.Show less
CVE-2017-13078 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVE-2017-13077 7Canonical DebianFreebsd+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Server+9 more May 13, 2026 Oct 17, 2017 N/A· v4 6.8 MEDIUM· v3 5.4 MEDIUM· v2 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...Show more Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.Show less
CVE-2015-7504 3Debian QemuXen 3Debian Linux QemuXen May 13, 2026 Oct 16, 2017 N/A· v4 8.8 HIGH· v3 4.6 MEDIUM· v2 Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets i...Show more Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.Show less
CVE-2016-8734 2Apache Debian 2Debian Linux Subversion May 13, 2026 Oct 16, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the t...Show more Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.Show less

Previous 1...381382383...501 Next