← Back

Debian

debian

10,158 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Dpkg
dpkg
Shadow
shadow
Lintian
lintian
Apt
apt
Reportbug
reportbug
Horde
horde
Devscripts
devscripts
Mime Support
mime-support
Fsp
fsp
Netkit
netkit
Qpopper
qpopper
Apt Cacher
apt-cacher
Aptlinex
aptlinex
Python Dns
python-dns
Xsabre
xsabre
Cifs Utils
cifs-utils
Dpkg Dev
dpkg-dev
Python Apt
python-apt
Yubiserver
yubiserver
Elvis Tiny
elvis_tiny
Sgml Tools
sgml-tools
Netstd
netstd
Bsdmainutils
bsdmainutils
Tetex Bin
tetex-bin
Debmake
debmake
Bsmtpd
bsmtpd
Sympa
sympa
Ppxp
ppxp
Apt Setup
apt-setup
Backupninja
backupninja
Amaya
amaya
Base Config
base-config
Apache
apache
Gfax
gfax
Reprepro
reprepro
Debian Goodies
debian-goodies
Guilt
guilt
Unp
unp
Tss
tss
Projectl
projectl
Turba
turba
Honeyd Common
honeyd_common
Citadel Server
citadel_server
Feta
feta
Dpkg Cross
dpkg-cross
Myspell
myspell
Newsgate
newsgate
Os Prober
os-prober
Mailscanner
mailscanner
Ltp
ltp
Horde Imp
horde_imp
Nss Ldap
nss-ldap
Libdbd Pg Perl
libdbd-pg-perl
Pyftpd
pyftpd
Mono Debugger
mono-debugger
Tex Common
tex-common
Php5 Common
php5-common
Logol
logol
Devotee
devotee
Apache2
apache2
Cfingerd
cfingerd
Latd
latd
Phpbb3
phpbb3
Txt2man
txt2man
Adequate
adequate
Localepurge
localepurge
Syncevolution
syncevolution
Axiom
axiom
Ppthtml
ppthtml
Xbuffy
xbuffy
Strongswan
strongswan
Kde4libs
kde4libs
Python Imaging
python-imaging
Hivex
hivex
Dbd Firebird
dbd-firebird
Fuse
fuse
Tor
tor
Ftpsync
ftpsync
Most
most
Tin
tin
Crossroads
crossroads
Tmpreaper
tmpreaper
Cron
cron
Overkill
overkill
Duplicity
duplicity

CVEs (10,158)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chr...Show more
DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.Show less
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web...Show more
Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.Show less
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.
4Debian
FedoraprojectGoogle+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Jun 17, 2026
Feb 19, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.
4Canonical
DebianFile Project+1 more
4Debian Linux
FileLeap+1 more
Jun 17, 2026
Feb 18, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
4Canonical
DebianFile Project+1 more
4Debian Linux
FileLeap+1 more
Jun 17, 2026
Feb 18, 2019
N/A· v4
4.4 MEDIUM· v3
3.6 LOW· v2
do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.
2Debian
Zabbix
2Debian Linux
Zabbix
Nov 21, 2024
Feb 17, 2019
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.