Browse CVEs

HIGH 7.5 CVE-2022-30293 In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platf… Debian Linux after 2.36.0 Fix from $1,9502022-05-06 CRITICAL 9.8 CVE-2022-29155EPSS 64% In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL s… Debian Linux 2.5.12 / 2.6.2+ Fix from $2,3002022-05-04 HIGH 7.8 CVE-2021-42529 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2021-42530 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2021-42531 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 HIGH 7.8 CVE-2021-42532 XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code exec… Debian Linux after 2021.07 Fix from $1,9502022-05-02 MEDIUM 5.5 CVE-2021-42528 XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated a… Debian Linux after 2021.07 Fix from $1,6002022-05-02 HIGH 7.8 CVE-2021-46790 ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecat… Debian Linux after 2021.8.22 Fix from $1,9502022-05-02 HIGH 7.5 CVE-2022-29970 Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. Debian Linux 2.2.0+ Fix from $1,9502022-05-02 HIGH 7.5 CVE-2022-25647EPSS 12% The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal clas… Debian Linux 2.8.9+ Fix from $1,9502022-05-01 HIGH 7.8 CVE-2022-27239 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining… Debian Linux 6.15+ Fix from $1,9502022-04-27 HIGH 7.8 CVE-2022-1441 MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the fu… Debian Linux Patch available Fix from $1,9502022-04-25 HIGH 7.5 CVE-2022-24792 PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit sys… Debian Linux after 2.12 Fix from $1,9502022-04-25 HIGH 7.8 CVE-2019-25059 Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839. Debian Linux after 9.26 Fix from $1,9502022-04-25 MEDIUM 5.3 CVE-2022-21496 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affec… Debian Linux after 11.70.1 Fix from $1,6002022-04-19 HIGH 7.5 CVE-2022-21476 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux after 17.0.2 Fix from $1,9502022-04-19 HIGH 7.5 CVE-2022-21449EPSS 60% Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux Patch available Fix from $1,9502022-04-19 MEDIUM 5.3 CVE-2022-21426 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affec… Debian Linux Patch available Fix from $1,6002022-04-19 MEDIUM 5.3 CVE-2022-21434 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux Patch available Fix from $1,6002022-04-19 HIGH 7.1 CVE-2022-29458 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo libra… Debian Linux 6.3 / 13.0+ Fix from $1,9502022-04-18 MEDIUM 5.5 CVE-2022-24859 PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.… Debian Linux 1.27.5+ Fix from $1,6002022-04-18 HIGH 7.8 CVE-2021-3624 There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be exe… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35629 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35630 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35631 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-35632 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-28615 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-28616 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-28617 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18 HIGH 8.8 CVE-2020-28618 Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed fil… Debian Linux No fix yet Fix from $1,9502022-04-18