Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4572 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-38802 4Debian FedoraprojectFrrouting+1 more 4Debian Linux FedoraFrrouting+1 more Jun 17, 2026 Aug 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
CVE-2023-41361 2Debian Frrouting 2Debian Linux Frrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.
CVE-2023-41360 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.
CVE-2023-41358 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Aug 29, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.
CVE-2023-4569 3Debian LinuxRedhat 3Debian Linux Enterprise LinuxLinux Kernel Jun 17, 2026 Aug 28, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a...Show more A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.Show less
CVE-2020-24165 2Debian Qemu 2Debian Linux Qemu Jun 17, 2026 Aug 28, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid securi...Show more An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties.Show less
CVE-2023-41080 2Apache Debian 2Debian Linux Tomcat Jun 17, 2026 Aug 25, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0...Show more URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. Older, EOL versions may also be affected. The vulnerability is limited to the ROOT (default) web application.Show less
CVE-2023-40577 2Debian Prometheus 2Alertmanager Debian Linux Jun 17, 2026 Aug 25, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript...Show more Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.Show less
CVE-2023-4431 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 23, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4430 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4429 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4428 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 23, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2022-48566 3Debian NetappPython 4Active Iq Unified Manager Converged Systems Advisor AgentDebian Linux+1 more Jun 17, 2026 Aug 22, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
CVE-2022-48565 2Debian Python 2Debian Linux Python Jun 17, 2026 Aug 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
CVE-2022-48560 2Debian Python 2Debian Linux Python Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVE-2022-48554 2Debian File Project 2Debian Linux File Jun 17, 2026 Aug 22, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
CVE-2022-48174 2Busybox Debian 2Busybox Debian Linux Jul 14, 2026 Aug 22, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
CVE-2022-44730 2Apache Debian 2Debian Linux Xml Graphics Batik Jun 17, 2026 Aug 22, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it dire...Show more Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL.Show less
CVE-2022-44729 2Apache Debian 2Debian Linux Xml Graphics Batik Jun 17, 2026 Aug 22, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading externa...Show more Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.Show less

Previous 1...707172...508 Next