← Back

Debian

debian

10,146 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Debian Linux
debian_linux
10,001 CVEs
Advanced Package Tool
advanced_package_tool
21 CVEs
Dpkg
dpkg
14 CVEs
Shadow
shadow
8 CVEs
Lintian
lintian
6 CVEs
Apt
apt
5 CVEs
Reportbug
reportbug
3 CVEs
Horde
horde
3 CVEs
Devscripts
devscripts
3 CVEs
Mime Support
mime-support
2 CVEs
Fsp
fsp
2 CVEs
Netkit
netkit
2 CVEs
Qpopper
qpopper
2 CVEs
Apt Cacher
apt-cacher
2 CVEs
Aptlinex
aptlinex
2 CVEs
Python Dns
python-dns
2 CVEs
Xsabre
xsabre
2 CVEs
Horde Groupware
horde_groupware
2 CVEs
Cifs Utils
cifs-utils
2 CVEs
Dpkg Dev
dpkg-dev
2 CVEs
Python Apt
python-apt
2 CVEs
Yubiserver
yubiserver
2 CVEs
Elvis Tiny
elvis_tiny
1 CVE
Sgml Tools
sgml-tools
1 CVE
Netstd
netstd
1 CVE
Internet Message
internet_message
1 CVE
Bsdmainutils
bsdmainutils
1 CVE
Tetex Bin
tetex-bin
1 CVE
Debmake
debmake
1 CVE
Bsmtpd
bsmtpd
1 CVE
Toolchain Source
toolchain-source
1 CVE
Sympa
sympa
1 CVE
Ppxp
ppxp
1 CVE
Apt Setup
apt-setup
1 CVE
Backupninja
backupninja
1 CVE
Kernel Patch Vserver
kernel-patch-vserver
1 CVE
Libmail Audit Perl
libmail-audit-perl
1 CVE
Amaya
amaya
1 CVE
Base Config
base-config
1 CVE
Apache
apache
1 CVE
Gfax
gfax
1 CVE
Reprepro
reprepro
1 CVE
Debian Goodies
debian-goodies
1 CVE
Guilt
guilt
1 CVE
Unp
unp
1 CVE
Apt Listchanges
apt-listchanges
1 CVE
Tss
tss
1 CVE
Projectl
projectl
1 CVE
Turba
turba
1 CVE
Honeyd Common
honeyd_common
1 CVE
Citadel Server
citadel_server
1 CVE
Feta
feta
1 CVE
Dpkg Cross
dpkg-cross
1 CVE
Myspell
myspell
1 CVE
Newsgate
newsgate
1 CVE
Initramfs Tools
initramfs-tools
1 CVE
Os Prober
os-prober
1 CVE
Mailscanner
mailscanner
1 CVE
Ltp
ltp
1 CVE
Horde Imp
horde_imp
1 CVE
Nss Ldap
nss-ldap
1 CVE
Libdbd Pg Perl
libdbd-pg-perl
1 CVE
Pyftpd
pyftpd
1 CVE
Mono Debugger
mono-debugger
1 CVE
Tex Common
tex-common
1 CVE
Texlive Extra Utils
texlive-extra-utils
1 CVE
Php5 Common
php5-common
1 CVE
Logol
logol
1 CVE
Devotee
devotee
1 CVE
Apache2
apache2
1 CVE
Cfingerd
cfingerd
1 CVE
Latd
latd
1 CVE
Phpbb3
phpbb3
1 CVE
Txt2man
txt2man
1 CVE
Adequate
adequate
1 CVE
Localepurge
localepurge
1 CVE
Syncevolution
syncevolution
1 CVE
Axiom
axiom
1 CVE
Ppthtml
ppthtml
1 CVE
Xbuffy
xbuffy
1 CVE
Strongswan
strongswan
1 CVE
Kde4libs
kde4libs
1 CVE
Python Imaging
python-imaging
1 CVE
Exuberant Ctags
exuberant_ctags
1 CVE
Hivex
hivex
1 CVE
Dbd Firebird
dbd-firebird
1 CVE
Unattended Upgrades
unattended-upgrades
1 CVE
Fuse
fuse
1 CVE
Tor
tor
1 CVE
Xbindkeys Config
xbindkeys-config
1 CVE
Ftpsync
ftpsync
1 CVE
Most
most
1 CVE
Postgresql Common
postgresql-common
1 CVE
Tin
tin
1 CVE
Crossroads
crossroads
1 CVE
Tmpreaper
tmpreaper
1 CVE
Cron
cron
1 CVE
Overkill
overkill
1 CVE
Duplicity
duplicity
1 CVE
Debian Lan Config
debian-lan-config
1 CVE

CVEs (10,146)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-6109
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the use...Show more
readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.Show less
CVE-2018-6106
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page.
CVE-2018-6100
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6097
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page.
CVE-2018-6096
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
CVE-2018-6093
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2018-6091
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2018-6084
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via an executable file.
CVE-2018-6056
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Jan 9, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-17470
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jan 9, 2019
N/A· v4
7.4 HIGH· v3
4.3 MEDIUM· v2
A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2018-17461
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jan 9, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
CVE-2018-16068
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jan 9, 2019
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2018-16067
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-16066
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jan 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-16065
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Nov 21, 2024
Jan 9, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2019-5719
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Jan 8, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.
CVE-2019-5718
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Jan 8, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.
CVE-2019-5717
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Jan 8, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.
CVE-2019-5716
2Debian
Wireshark
2Debian Linux
Wireshark
Jun 17, 2026
Jan 8, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.
CVE-2018-1320
4Apache
DebianF5+1 more
5Debian Linux
Global Lifecycle Management OpatchNosql Database+2 more
Nov 21, 2024
Jan 7, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake...Show more
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.Show less