← Back

Debian

debian

10,147 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Debian Linux
debian_linux
10,002 CVEs
Advanced Package Tool
advanced_package_tool
21 CVEs
Dpkg
dpkg
14 CVEs
Shadow
shadow
8 CVEs
Lintian
lintian
6 CVEs
Apt
apt
5 CVEs
Reportbug
reportbug
3 CVEs
Horde
horde
3 CVEs
Devscripts
devscripts
3 CVEs
Mime Support
mime-support
2 CVEs
Fsp
fsp
2 CVEs
Netkit
netkit
2 CVEs
Qpopper
qpopper
2 CVEs
Apt Cacher
apt-cacher
2 CVEs
Aptlinex
aptlinex
2 CVEs
Python Dns
python-dns
2 CVEs
Xsabre
xsabre
2 CVEs
Horde Groupware
horde_groupware
2 CVEs
Cifs Utils
cifs-utils
2 CVEs
Dpkg Dev
dpkg-dev
2 CVEs
Python Apt
python-apt
2 CVEs
Yubiserver
yubiserver
2 CVEs
Elvis Tiny
elvis_tiny
1 CVE
Sgml Tools
sgml-tools
1 CVE
Netstd
netstd
1 CVE
Internet Message
internet_message
1 CVE
Bsdmainutils
bsdmainutils
1 CVE
Tetex Bin
tetex-bin
1 CVE
Debmake
debmake
1 CVE
Bsmtpd
bsmtpd
1 CVE
Toolchain Source
toolchain-source
1 CVE
Sympa
sympa
1 CVE
Ppxp
ppxp
1 CVE
Apt Setup
apt-setup
1 CVE
Backupninja
backupninja
1 CVE
Kernel Patch Vserver
kernel-patch-vserver
1 CVE
Libmail Audit Perl
libmail-audit-perl
1 CVE
Amaya
amaya
1 CVE
Base Config
base-config
1 CVE
Apache
apache
1 CVE
Gfax
gfax
1 CVE
Reprepro
reprepro
1 CVE
Debian Goodies
debian-goodies
1 CVE
Guilt
guilt
1 CVE
Unp
unp
1 CVE
Apt Listchanges
apt-listchanges
1 CVE
Tss
tss
1 CVE
Projectl
projectl
1 CVE
Turba
turba
1 CVE
Honeyd Common
honeyd_common
1 CVE
Citadel Server
citadel_server
1 CVE
Feta
feta
1 CVE
Dpkg Cross
dpkg-cross
1 CVE
Myspell
myspell
1 CVE
Newsgate
newsgate
1 CVE
Initramfs Tools
initramfs-tools
1 CVE
Os Prober
os-prober
1 CVE
Mailscanner
mailscanner
1 CVE
Ltp
ltp
1 CVE
Horde Imp
horde_imp
1 CVE
Nss Ldap
nss-ldap
1 CVE
Libdbd Pg Perl
libdbd-pg-perl
1 CVE
Pyftpd
pyftpd
1 CVE
Mono Debugger
mono-debugger
1 CVE
Tex Common
tex-common
1 CVE
Texlive Extra Utils
texlive-extra-utils
1 CVE
Php5 Common
php5-common
1 CVE
Logol
logol
1 CVE
Devotee
devotee
1 CVE
Apache2
apache2
1 CVE
Cfingerd
cfingerd
1 CVE
Latd
latd
1 CVE
Phpbb3
phpbb3
1 CVE
Txt2man
txt2man
1 CVE
Adequate
adequate
1 CVE
Localepurge
localepurge
1 CVE
Syncevolution
syncevolution
1 CVE
Axiom
axiom
1 CVE
Ppthtml
ppthtml
1 CVE
Xbuffy
xbuffy
1 CVE
Strongswan
strongswan
1 CVE
Kde4libs
kde4libs
1 CVE
Python Imaging
python-imaging
1 CVE
Exuberant Ctags
exuberant_ctags
1 CVE
Hivex
hivex
1 CVE
Dbd Firebird
dbd-firebird
1 CVE
Unattended Upgrades
unattended-upgrades
1 CVE
Fuse
fuse
1 CVE
Tor
tor
1 CVE
Xbindkeys Config
xbindkeys-config
1 CVE
Ftpsync
ftpsync
1 CVE
Most
most
1 CVE
Postgresql Common
postgresql-common
1 CVE
Tin
tin
1 CVE
Crossroads
crossroads
1 CVE
Tmpreaper
tmpreaper
1 CVE
Cron
cron
1 CVE
Overkill
overkill
1 CVE
Duplicity
duplicity
1 CVE
Debian Lan Config
debian-lan-config
1 CVE

CVEs (10,147)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-16239
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Jun 17, 2026
Sep 17, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
CVE-2019-5482
6Debian
FedoraprojectHaxx+3 more
17Cloud Backup
Communications Operations MonitorCommunications Session Border Controller+14 more
Jun 17, 2026
Sep 16, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.
CVE-2019-5481
6Debian
FedoraprojectHaxx+3 more
12Cloud Backup
Communications Operations MonitorCommunications Session Border Controller+9 more
Jun 17, 2026
Sep 16, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2018-21016
2Debian
Gpac
2Debian Linux
Gpac
Nov 21, 2024
Sep 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVE-2018-21015
2Debian
Gpac
2Debian Linux
Gpac
Nov 21, 2024
Sep 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication =...Show more
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.Show less
CVE-2019-16335
6Debian
FasterxmlFedoraproject+3 more
17Banking Platform
Customer Management And Segmentation FoundationDebian Linux+14 more
Jun 17, 2026
Sep 15, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVE-2019-14540
6Debian
FasterxmlFedoraproject+3 more
19Banking Platform
Customer Management And Segmentation FoundationDebian Linux+16 more
Jun 17, 2026
Sep 15, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVE-2019-16319
3Debian
OpensuseWireshark
3Debian Linux
LeapWireshark
Jun 17, 2026
Sep 15, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero.
CVE-2019-16275
3Canonical
DebianW1.fi
4Debian Linux
HostapdUbuntu Linux+1 more
Jun 17, 2026
Sep 12, 2019
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been p...Show more
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.Show less
CVE-2019-16237
4Canonical
DebianDino+1 more
4Debian Linux
DinoFedora+1 more
Jun 17, 2026
Sep 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
CVE-2019-16236
4Canonical
DebianDino+1 more
4Debian Linux
DinoFedora+1 more
Jun 17, 2026
Sep 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
CVE-2019-16235
4Canonical
DebianDino+1 more
4Debian Linux
DinoFedora+1 more
Jun 17, 2026
Sep 11, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
CVE-2019-16223
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
WordPress before 5.2.3 allows XSS in post previews by authenticated users.
CVE-2019-16222
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.
CVE-2019-16221
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.2.3 allows reflected XSS in the dashboard.
CVE-2019-16220
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.
CVE-2019-16219
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.2.3 allows XSS in shortcode previews.
CVE-2019-16218
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.2.3 allows XSS in stored comments.
CVE-2019-16217
2Debian
Wordpress
2Debian Linux
Wordpress
Jun 17, 2026
Sep 11, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.
CVE-2019-16168
8Canonical
DebianFedoraproject+5 more
20Active Iq Unified Manager
Communications Design StudioDebian Linux+17 more
Jun 17, 2026
Sep 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."