Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-13164 4Canonical DebianOpensuse+1 more 4Debian Linux LeapQemu+1 more Jun 17, 2026 Jul 3, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
CVE-2019-12594 2Debian Dosbox 2Debian Linux Dosbox Jun 17, 2026 Jul 2, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 DOSBox 0.74-2 has Incorrect Access Control.
CVE-2019-13147 2Audiofile Debian 2Audiofile Debian Linux Jun 17, 2026 Jul 2, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.
CVE-2019-13137 3Canonical DebianImagemagick 3Debian Linux ImagemagickUbuntu Linux Jun 17, 2026 Jul 1, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
CVE-2019-13135 4Canonical DebianF5+1 more 5Big Ip Application Acceleration Manager Big Ip WebacceleratorDebian Linux+2 more Jun 17, 2026 Jul 1, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
CVE-2019-12781 3Canonical DebianDjangoproject 3Debian Linux DjangoUbuntu Linux Jun 17, 2026 Jul 1, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and t...Show more An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3. An HTTP request is not redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings are used, and the proxy connects to Django via HTTPS. In other words, django.http.HttpRequest.scheme has incorrect behavior when a client uses HTTP.Show less
CVE-2019-13117 6Canonical DebianFedoraproject+3 more 6Debian Linux FedoraLeap+3 more Jun 17, 2026 Jul 1, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains...Show more In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.Show less
CVE-2019-13114 4Canonical DebianExiv2+1 more 4Debian Linux Exiv2Fedora+1 more Jun 17, 2026 Jun 30, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
CVE-2019-13112 4Canonical DebianExiv2+1 more 4Debian Linux Exiv2Fedora+1 more Jun 17, 2026 Jun 30, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.
CVE-2019-13110 4Canonical DebianExiv2+1 more 4Debian Linux Exiv2Fedora+1 more Jun 17, 2026 Jun 30, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file.
CVE-2019-13031 2Debian Lemonldap Ng 2Debian Linux Lemonldap\ Jun 17, 2026 Jun 28, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server. By default, the notification server is not enabled and has a "deny all" rule.
CVE-2019-5840 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVE-2019-5839 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL.
CVE-2019-5838 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome...Show more Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.Show less
CVE-2019-5837 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2019-5836 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-5834 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVE-2019-5833 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.
CVE-2019-5832 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2019-5831 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Jun 27, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Previous 1...277278279...508 Next