← Back

Debian

debian

10,147 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Debian Linux
debian_linux
10,002 CVEs
Advanced Package Tool
advanced_package_tool
21 CVEs
Dpkg
dpkg
14 CVEs
Shadow
shadow
8 CVEs
Lintian
lintian
6 CVEs
Apt
apt
5 CVEs
Reportbug
reportbug
3 CVEs
Horde
horde
3 CVEs
Devscripts
devscripts
3 CVEs
Mime Support
mime-support
2 CVEs
Fsp
fsp
2 CVEs
Netkit
netkit
2 CVEs
Qpopper
qpopper
2 CVEs
Apt Cacher
apt-cacher
2 CVEs
Aptlinex
aptlinex
2 CVEs
Python Dns
python-dns
2 CVEs
Xsabre
xsabre
2 CVEs
Horde Groupware
horde_groupware
2 CVEs
Cifs Utils
cifs-utils
2 CVEs
Dpkg Dev
dpkg-dev
2 CVEs
Python Apt
python-apt
2 CVEs
Yubiserver
yubiserver
2 CVEs
Elvis Tiny
elvis_tiny
1 CVE
Sgml Tools
sgml-tools
1 CVE
Netstd
netstd
1 CVE
Internet Message
internet_message
1 CVE
Bsdmainutils
bsdmainutils
1 CVE
Tetex Bin
tetex-bin
1 CVE
Debmake
debmake
1 CVE
Bsmtpd
bsmtpd
1 CVE
Toolchain Source
toolchain-source
1 CVE
Sympa
sympa
1 CVE
Ppxp
ppxp
1 CVE
Apt Setup
apt-setup
1 CVE
Backupninja
backupninja
1 CVE
Kernel Patch Vserver
kernel-patch-vserver
1 CVE
Libmail Audit Perl
libmail-audit-perl
1 CVE
Amaya
amaya
1 CVE
Base Config
base-config
1 CVE
Apache
apache
1 CVE
Gfax
gfax
1 CVE
Reprepro
reprepro
1 CVE
Debian Goodies
debian-goodies
1 CVE
Guilt
guilt
1 CVE
Unp
unp
1 CVE
Apt Listchanges
apt-listchanges
1 CVE
Tss
tss
1 CVE
Projectl
projectl
1 CVE
Turba
turba
1 CVE
Honeyd Common
honeyd_common
1 CVE
Citadel Server
citadel_server
1 CVE
Feta
feta
1 CVE
Dpkg Cross
dpkg-cross
1 CVE
Myspell
myspell
1 CVE
Newsgate
newsgate
1 CVE
Initramfs Tools
initramfs-tools
1 CVE
Os Prober
os-prober
1 CVE
Mailscanner
mailscanner
1 CVE
Ltp
ltp
1 CVE
Horde Imp
horde_imp
1 CVE
Nss Ldap
nss-ldap
1 CVE
Libdbd Pg Perl
libdbd-pg-perl
1 CVE
Pyftpd
pyftpd
1 CVE
Mono Debugger
mono-debugger
1 CVE
Tex Common
tex-common
1 CVE
Texlive Extra Utils
texlive-extra-utils
1 CVE
Php5 Common
php5-common
1 CVE
Logol
logol
1 CVE
Devotee
devotee
1 CVE
Apache2
apache2
1 CVE
Cfingerd
cfingerd
1 CVE
Latd
latd
1 CVE
Phpbb3
phpbb3
1 CVE
Txt2man
txt2man
1 CVE
Adequate
adequate
1 CVE
Localepurge
localepurge
1 CVE
Syncevolution
syncevolution
1 CVE
Axiom
axiom
1 CVE
Ppthtml
ppthtml
1 CVE
Xbuffy
xbuffy
1 CVE
Strongswan
strongswan
1 CVE
Kde4libs
kde4libs
1 CVE
Python Imaging
python-imaging
1 CVE
Exuberant Ctags
exuberant_ctags
1 CVE
Hivex
hivex
1 CVE
Dbd Firebird
dbd-firebird
1 CVE
Unattended Upgrades
unattended-upgrades
1 CVE
Fuse
fuse
1 CVE
Tor
tor
1 CVE
Xbindkeys Config
xbindkeys-config
1 CVE
Ftpsync
ftpsync
1 CVE
Most
most
1 CVE
Postgresql Common
postgresql-common
1 CVE
Tin
tin
1 CVE
Crossroads
crossroads
1 CVE
Tmpreaper
tmpreaper
1 CVE
Cron
cron
1 CVE
Overkill
overkill
1 CVE
Duplicity
duplicity
1 CVE
Debian Lan Config
debian-lan-config
1 CVE

CVEs (10,147)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15980
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.
CVE-2020-15979
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15978
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVE-2020-15977
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
CVE-2020-15976
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15975
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15974
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.
CVE-2020-15973
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension.
CVE-2020-15972
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15971
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-15970
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-15969
5Apple
DebianFedoraproject+2 more
10Backports Sle
ChromeDebian Linux+7 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15968
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15967
4Debian
FedoraprojectGoogle+1 more
4Backports Sle
ChromeDebian Linux+1 more
Jun 17, 2026
Nov 3, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-28040
3Canonical
DebianWordpress
3Debian Linux
Ubuntu LinuxWordpress
Jun 17, 2026
Nov 2, 2020
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.5.2 allows CSRF attacks that change a theme's background image.
CVE-2020-28039
3Canonical
DebianWordpress
3Debian Linux
Ubuntu LinuxWordpress
Jun 17, 2026
Nov 2, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected.
CVE-2020-28038
3Debian
FedoraprojectWordpress
3Debian Linux
FedoraWordpress
Jun 17, 2026
Nov 2, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.5.2 allows stored XSS via post slugs.
CVE-2020-28037
3Debian
FedoraprojectWordpress
3Debian Linux
FedoraWordpress
Jun 17, 2026
Nov 2, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code e...Show more
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation).Show less
CVE-2020-28036
3Debian
FedoraprojectWordpress
3Debian Linux
FedoraWordpress
Jun 17, 2026
Nov 2, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post.
CVE-2020-28035
3Debian
FedoraprojectWordpress
3Debian Linux
FedoraWordpress
Jun 17, 2026
Nov 2, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.