Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-37051 2Debian Freedesktop 2Debian Linux Poppler Jun 17, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
CVE-2022-37050 2Debian Freedesktop 2Debian Linux Poppler Jun 17, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog pro...Show more In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of CVE-2018-20662.Show less
CVE-2020-35357 2Debian Gnu 2Debian Linux Gnu Scientific Library Jun 17, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_...Show more A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2020-23804 2Debian Freedesktop 2Debian Linux Poppler Jun 17, 2026 Aug 22, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
CVE-2020-22217 2C Ares Debian 2C Ares Debian Linux Jun 17, 2026 Aug 22, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
CVE-2020-19189 4Debian GnuInvisible Island+1 more 4Active Iq Unified Manager Debian LinuxNcurses+1 more Jul 23, 2026 Aug 22, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVE-2023-37369 2Debian Qt 2Debian Linux Qt Jun 17, 2026 Aug 20, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a l...Show more In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.Show less
CVE-2023-4368 2Debian Google 2Chrome Debian Linux Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page....Show more Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4367 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page....Show more Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4366 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium sec...Show more Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4365 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4364 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4363 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4362 2Debian Google 2Chrome Debian Linux Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption vi...Show more Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4361 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4360 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4359 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page. (Chromium security severity:...Show more Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-4358 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4357 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4356 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Aug 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chr...Show more Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less

Previous 1...717273...508 Next