← Back

Debian Linux

debian_linux

Vendor: Debian • 10,011 CVEs

CVEs (10,011)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.Show less
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
4Canonical
DebianIbm+1 more
7Debian Linux
Forms ViewerJavafx+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
4Canonical
DebianIbm+1 more
5Debian Linux
Forms ViewerJdk+2 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
4Canonical
DebianJuniper+1 more
6Debian Linux
JdkJre+3 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
Oct 14, 2026
Apr 16, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab...Show more
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.Show less
5Canonical
DebianIbm+2 more
7Debian Linux
Forms ViewerJdk+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.Show less
5Canonical
DebianIbm+2 more
7Debian Linux
Forms ViewerJdk+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
5Canonical
DebianIbm+2 more
7Debian Linux
Forms ViewerJdk+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.Show less
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab...Show more
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.Show less
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vul...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.Show less
3Canonical
DebianOracle
4Debian Linux
JdkJre+1 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
5Canonical
DebianIbm+2 more
7Debian Linux
Forms ViewerJdk+4 more
May 6, 2026
Apr 16, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec...Show more
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.Show less
2Debian
Haxx
3Curl
Debian LinuxLibcurl
May 6, 2026
Apr 15, 2014
N/A· v4
N/A· v3
6.4 MEDIUM· v2
The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context...Show more
The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, which might allow context-dependent attackers to connect as other users via a request, a similar issue to CVE-2014-0015.Show less
2Debian
Trustwave
2Debian Linux
Modsecurity
May 6, 2026
Apr 15, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.
2Debian
Linux
2Debian Linux
Linux Kernel
May 6, 2026
Apr 14, 2014
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a cr...Show more
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter.Show less
2Debian
Openafs
2Debian Linux
Openafs
May 6, 2026
Apr 14, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial of service (crash) via a crafted statsVersion argument.
3Debian
GoogleOpensuse
3Chrome
Debian LinuxOpensuse
May 6, 2026
Apr 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."Show less