Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-40391 3Debian FedoraprojectGerbv Project 3Debian Linux FedoraGerbv Jun 17, 2026 Nov 19, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file ca...Show more An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-21900 3Debian FedoraprojectLibrecad 3Debian Linux FedoraLibdxfrw Jun 17, 2026 Nov 19, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can prov...Show more A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-21899 3Debian FedoraprojectLibrecad 3Debian Linux FedoraLibdxfrw Jun 17, 2026 Nov 19, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can pro...Show more A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2021-39929 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39926 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
CVE-2021-39925 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39924 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39923 2Debian Wireshark 2Debian Linux Wireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39922 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39921 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-3973 3Debian FedoraprojectVim 3Debian Linux FedoraVim Oct 8, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3974 3Debian FedoraprojectVim 3Debian Linux FedoraVim Oct 8, 2026 Nov 19, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free
CVE-2021-44026 3Debian FedoraprojectRoundcube 3Debian Linux FedoraWebmail Jun 17, 2026 Nov 19, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
CVE-2021-44025 3Debian FedoraprojectRoundcube 3Debian Linux FedoraWebmail Jun 17, 2026 Nov 19, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message.
CVE-2021-39928 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-43976 5Debian FedoraprojectLinux+2 more 15Cloud Backup Communications Cloud Native Core Binding Support FunctionCommunications Cloud Native Core Network Exposure Function+12 more Jun 17, 2026 Nov 17, 2021 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).
CVE-2021-43975 4Debian FedoraprojectLinux+1 more 11Cloud Backup Debian LinuxFedora+8 more Oct 8, 2026 Nov 17, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a...Show more In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.Show less
CVE-2021-22959 3Debian LlhttpOracle 3Debian Linux GraalvmLlhttp Jun 17, 2026 Nov 15, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6.
CVE-2021-43618 3Debian GmplibNetapp 8Active Iq Unified Manager Debian LinuxGmp+5 more Oct 14, 2026 Nov 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
CVE-2021-3918 2Debian Json Schema Project 2Debian Linux Json Schema Jun 17, 2026 Nov 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Previous 1...141142143...508 Next