Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-3805 2Debian Object Path Project 2Debian Linux Object Path Jun 17, 2026 Sep 17, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-21599 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.
CVE-2020-21598 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.
CVE-2020-21597 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.
CVE-2020-21596 2Debian Struktur 2Debian Linux Libde265 Jun 17, 2026 Sep 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file.
CVE-2020-21535 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
CVE-2020-21534 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
CVE-2020-21533 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
CVE-2020-21532 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
CVE-2020-21531 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
CVE-2020-21530 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
CVE-2020-21529 2Debian Xfig Project 2Debian Linux Fig2dev Jun 17, 2026 Sep 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
CVE-2021-41079 3Apache DebianNetapp 3Debian Linux Management Services For Element Software And Netapp HciTomcat Oct 8, 2026 Sep 16, 2021 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet...Show more Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service.Show less
CVE-2021-40438 11Apache BroadcomDebian+8 more 39Brocade Fabric Operating System Firmware Cloud BackupClustered Data Ontap+36 more Aug 6, 2026 Sep 16, 2021 N/A· v4 9.0 CRITICAL· v3 6.8 MEDIUM· v2 A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-39275 6Apache DebianFedoraproject+3 more 11Cloud Backup Clustered Data OntapDebian Linux+8 more Jun 17, 2026 Sep 16, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Serve...Show more ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.Show less
CVE-2021-36160 6Apache BroadcomDebian+3 more 13Brocade Fabric Operating System Firmware Cloud BackupClustered Data Ontap+10 more Jun 17, 2026 Sep 16, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
CVE-2021-34798 8Apache BroadcomDebian+5 more 18Brocade Fabric Operating System Firmware Cloud BackupClustered Data Ontap+15 more Jun 17, 2026 Sep 16, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-3796 4Debian FedoraprojectNetapp+1 more 4Debian Linux FedoraOntap Select Deploy Administration Utility+1 more Jun 17, 2026 Sep 15, 2021 N/A· v4 7.3 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free
CVE-2021-3778 4Debian FedoraprojectNetapp+1 more 4Debian Linux FedoraOntap Select Deploy Administration Utility+1 more Jun 17, 2026 Sep 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-41072 2Debian Squashfs Tools Project 2Debian Linux Squashfs Tools Jun 17, 2026 Sep 14, 2021 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents u...Show more squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create the symbolic link pointing outside the expected directory, and then the subsequent write operation will cause the unsquashfs process to write through the symbolic link elsewhere in the filesystem.Show less

Previous 1...149150151...508 Next