← Back

Debian

debian

10,146 CVEs • 112 products

Products (112)

Click to collapse
Toggle
Debian Linux
debian_linux
10,001 CVEs
Advanced Package Tool
advanced_package_tool
21 CVEs
Dpkg
dpkg
14 CVEs
Shadow
shadow
8 CVEs
Lintian
lintian
6 CVEs
Apt
apt
5 CVEs
Reportbug
reportbug
3 CVEs
Horde
horde
3 CVEs
Devscripts
devscripts
3 CVEs
Mime Support
mime-support
2 CVEs
Fsp
fsp
2 CVEs
Netkit
netkit
2 CVEs
Qpopper
qpopper
2 CVEs
Apt Cacher
apt-cacher
2 CVEs
Aptlinex
aptlinex
2 CVEs
Python Dns
python-dns
2 CVEs
Xsabre
xsabre
2 CVEs
Horde Groupware
horde_groupware
2 CVEs
Cifs Utils
cifs-utils
2 CVEs
Dpkg Dev
dpkg-dev
2 CVEs
Python Apt
python-apt
2 CVEs
Yubiserver
yubiserver
2 CVEs
Elvis Tiny
elvis_tiny
1 CVE
Sgml Tools
sgml-tools
1 CVE
Netstd
netstd
1 CVE
Internet Message
internet_message
1 CVE
Bsdmainutils
bsdmainutils
1 CVE
Tetex Bin
tetex-bin
1 CVE
Debmake
debmake
1 CVE
Bsmtpd
bsmtpd
1 CVE
Toolchain Source
toolchain-source
1 CVE
Sympa
sympa
1 CVE
Ppxp
ppxp
1 CVE
Apt Setup
apt-setup
1 CVE
Backupninja
backupninja
1 CVE
Kernel Patch Vserver
kernel-patch-vserver
1 CVE
Libmail Audit Perl
libmail-audit-perl
1 CVE
Amaya
amaya
1 CVE
Base Config
base-config
1 CVE
Apache
apache
1 CVE
Gfax
gfax
1 CVE
Reprepro
reprepro
1 CVE
Debian Goodies
debian-goodies
1 CVE
Guilt
guilt
1 CVE
Unp
unp
1 CVE
Apt Listchanges
apt-listchanges
1 CVE
Tss
tss
1 CVE
Projectl
projectl
1 CVE
Turba
turba
1 CVE
Honeyd Common
honeyd_common
1 CVE
Citadel Server
citadel_server
1 CVE
Feta
feta
1 CVE
Dpkg Cross
dpkg-cross
1 CVE
Myspell
myspell
1 CVE
Newsgate
newsgate
1 CVE
Initramfs Tools
initramfs-tools
1 CVE
Os Prober
os-prober
1 CVE
Mailscanner
mailscanner
1 CVE
Ltp
ltp
1 CVE
Horde Imp
horde_imp
1 CVE
Nss Ldap
nss-ldap
1 CVE
Libdbd Pg Perl
libdbd-pg-perl
1 CVE
Pyftpd
pyftpd
1 CVE
Mono Debugger
mono-debugger
1 CVE
Tex Common
tex-common
1 CVE
Texlive Extra Utils
texlive-extra-utils
1 CVE
Php5 Common
php5-common
1 CVE
Logol
logol
1 CVE
Devotee
devotee
1 CVE
Apache2
apache2
1 CVE
Cfingerd
cfingerd
1 CVE
Latd
latd
1 CVE
Phpbb3
phpbb3
1 CVE
Txt2man
txt2man
1 CVE
Adequate
adequate
1 CVE
Localepurge
localepurge
1 CVE
Syncevolution
syncevolution
1 CVE
Axiom
axiom
1 CVE
Ppthtml
ppthtml
1 CVE
Xbuffy
xbuffy
1 CVE
Strongswan
strongswan
1 CVE
Kde4libs
kde4libs
1 CVE
Python Imaging
python-imaging
1 CVE
Exuberant Ctags
exuberant_ctags
1 CVE
Hivex
hivex
1 CVE
Dbd Firebird
dbd-firebird
1 CVE
Unattended Upgrades
unattended-upgrades
1 CVE
Fuse
fuse
1 CVE
Tor
tor
1 CVE
Xbindkeys Config
xbindkeys-config
1 CVE
Ftpsync
ftpsync
1 CVE
Most
most
1 CVE
Postgresql Common
postgresql-common
1 CVE
Tin
tin
1 CVE
Crossroads
crossroads
1 CVE
Tmpreaper
tmpreaper
1 CVE
Cron
cron
1 CVE
Overkill
overkill
1 CVE
Duplicity
duplicity
1 CVE
Debian Lan Config
debian-lan-config
1 CVE

CVEs (10,146)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-6105
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6104
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6103
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.
CVE-2018-6102
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
CVE-2018-6101
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.
CVE-2018-6099
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.
CVE-2018-6098
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6095
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.
CVE-2018-6094
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-6092
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-6090
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-6089
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML pag...Show more
A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.Show less
CVE-2018-6088
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
CVE-2018-6087
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-6086
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
CVE-2018-6085
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
CVE-2018-19841
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
Nov 21, 2024
Dec 4, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio...Show more
The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.Show less
CVE-2018-19824
3Canonical
DebianLinux
3Debian Linux
Linux KernelUbuntu Linux
Nov 21, 2024
Dec 3, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card....Show more
In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.Show less
CVE-2018-19788
3Canonical
DebianPolkit Project
3Debian Linux
PolkitUbuntu Linux
Nov 21, 2024
Dec 3, 2018
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
CVE-2018-19787
3Canonical
DebianLxml
3Debian Linux
LxmlUbuntu Linux
Dec 18, 2025
Dec 2, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j...Show more
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.Show less