Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-14404 4Canonical DebianLibvnc Project+1 more 9Debian Linux LibvncserverSimatic Itc1500 Firmware+6 more Jun 17, 2026 Jun 17, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.
CVE-2020-14403 4Canonical DebianLibvnc Project+1 more 9Debian Linux LibvncserverSimatic Itc1500 Firmware+6 more Jun 17, 2026 Jun 17, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.
CVE-2020-14402 4Canonical DebianLibvnc Project+1 more 9Debian Linux LibvncserverSimatic Itc1500 Firmware+6 more Jun 17, 2026 Jun 17, 2020 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.
CVE-2020-14401 4Debian Libvncserver ProjectOpensuse+1 more 9Debian Linux LeapLibvncserver+6 more Jun 17, 2026 Jun 17, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
CVE-2020-14400 4Canonical DebianLibvncserver Project+1 more 4Debian Linux LeapLibvncserver+1 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no kn...Show more An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundaryShow less
CVE-2020-14399 4Canonical DebianLibvncserver Project+1 more 4Debian Linux LeapLibvncserver+1 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.
CVE-2020-14398 5Canonical DebianLibvnc Project+2 more 10Debian Linux LeapLibvncserver+7 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.
CVE-2020-14397 5Canonical DebianLibvnc Project+2 more 10Debian Linux LeapLibvncserver+7 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
CVE-2020-14396 4Canonical DebianLibvnc Project+1 more 9Debian Linux LibvncserverSimatic Itc1500 Firmware+6 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
CVE-2019-20840 5Canonical DebianLibvnc Project+2 more 10Debian Linux LeapLibvncserver+7 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.
CVE-2019-20839 5Canonical DebianLibvnc Project+2 more 10Debian Linux LeapLibvncserver+7 more Jun 17, 2026 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
CVE-2018-21247 5Canonical DebianLibvnc Project+2 more 10Debian Linux LeapLibvncserver+7 more Nov 21, 2024 Jun 17, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.
CVE-2020-14195 4Debian FasterxmlNetapp+1 more 14Active Iq Unified Manager Agile PlmBanking Digital Experience+11 more Jun 17, 2026 Jun 16, 2020 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
CVE-2020-4051 3Debian NetappOpenjsf 6Active Iq Unified Manager Debian LinuxDijit+3 more Jun 17, 2026 Jun 15, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater...Show more In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.Show less
CVE-2020-14148 3Barton DebianFedoraproject 3Debian Linux FedoraNgircd Jun 17, 2026 Jun 15, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
CVE-2020-14147 4Debian OracleRedislabs+1 more 4Communications Operations Monitor Debian LinuxLinux Enterprise+1 more Jun 17, 2026 Jun 15, 2020 N/A· v4 7.7 HIGH· v3 4.0 MEDIUM· v2 An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and a...Show more An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.Show less
CVE-2020-14152 2Debian Ijg 2Debian Linux Libjpeg Jun 17, 2026 Jun 15, 2020 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
CVE-2020-14093 4Canonical DebianMutt+1 more 4Debian Linux LeapMutt+1 more Jun 17, 2026 Jun 15, 2020 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
CVE-2020-14062 4Debian FasterxmlNetapp+1 more 13Active Iq Unified Manager Agile PlmBanking Digital Experience+10 more Jun 17, 2026 Jun 14, 2020 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).
CVE-2020-14061 4Debian FasterxmlNetapp+1 more 15Active Iq Unified Manager Agile PlmAutovue For Agile Product Lifecycle Management+12 more Jun 17, 2026 Jun 14, 2020 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms....Show more FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).Show less

Previous 1...215216217...508 Next