Browse CVEs

MEDIUM 5.5 CVE-2020-27760 In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input … Debian Linux 6.9.10-68 / 7.0.8-68+ Fix from $1,6002020-12-03 MEDIUM 5.5 CVE-2020-27762 A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined beha… Debian Linux 6.9.10-68 / 7.0.8-68+ Fix from $1,6002020-12-03 HIGH 7.4 CVE-2020-25638 A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can… Debian Linux 5.3.20 / 5.4.24+ Fix from $1,9502020-12-02 HIGH 7.5 CVE-2020-27813 An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to … Debian Linux 1.4.1+ Fix from $1,9502020-12-02 HIGH 7.8 CVE-2020-29394 A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary c… Debian Linux after 2.18.5 Fix from $1,9502020-11-30 CRITICAL 9.8 CVE-2020-28926EPSS 13% ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTT… Debian Linux 1.3.0+ Fix from $2,3002020-11-30 MEDIUM 5.0 CVE-2020-25624 hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver. Debian Linux Patch available Fix from $1,6002020-11-30 CRITICAL 9.8 CVE-2020-27745 Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin. Debian Linux 19.05.8 / 20.02.6+ Fix from $2,3002020-11-27 MEDIUM 6.4 CVE-2020-25651 A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an il… Debian Linux after 0.20.0 Fix from $1,6002020-11-26 MEDIUM 6.3 CVE-2020-25653 A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged loc… Debian Linux after 0.20.0 Fix from $1,6002020-11-26 MEDIUM 5.5 CVE-2020-25652 A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket… Debian Linux after 0.20.0 Fix from $1,6002020-11-26 MEDIUM 5.5 CVE-2020-25650 A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local gues… Debian Linux after 0.20.0 Fix from $1,6002020-11-25 HIGH 8.7 CVE-2020-26237 Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A m… Debian Linux 9.18.2 / 10.1.2+ Fix from $1,9502020-11-24 HIGH 7.2 CVE-2020-25654 An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication wi… Debian Linux 1.1.23 / 2.0.3+ Fix from $1,9502020-11-24 MEDIUM 5.5 CVE-2020-28928 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by a… Debian Linux after 1.2.1 Fix from $1,6002020-11-24 CRITICAL 9.8 CVE-2020-28984 prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils… Debian Linux 3.2.8+ Fix from $2,3002020-11-23 MEDIUM 5.3 CVE-2020-28896 Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was inva… Debian Linux 2.0.2 / 2020-11-20+ Fix from $1,6002020-11-23 HIGH 8.0 CVE-2019-14586 Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or d… Debian Linux Mitigation only Fix from $1,9502020-11-23 MEDIUM 6.5 CVE-2019-14587 Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access. Debian Linux No fix yet Fix from $1,6002020-11-23 MEDIUM 5.7 CVE-2020-0569 Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service v… Debian Linux 21.70+ Fix from $1,6002020-11-23 HIGH 7.8 CVE-2019-14563 Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. Debian Linux Mitigation only Fix from $1,9502020-11-23 HIGH 7.8 CVE-2019-14575 Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local acces… Debian Linux Mitigation only Fix from $1,9502020-11-23 MEDIUM 5.5 CVE-2019-14562 Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access. Debian Linux Mitigation only Fix from $1,6002020-11-23 HIGH 7.8 CVE-2020-20740 PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version(). Debian Linux 0.20+ Fix from $1,9502020-11-20 MEDIUM 5.3 CVE-2020-20739 im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote se… Debian Linux 8.8.2+ Fix from $1,6002020-11-20 HIGH 7.8 CVE-2020-19667 Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7. Debian Linux No fix yet Fix from $1,9502020-11-20 CRITICAL 9.8 CVE-2019-20933EPSS 31% InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may ha… Debian Linux 1.7.6+ Fix from $2,3002020-11-19 MEDIUM 6.1 CVE-2020-26215 Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser … Debian Linux 6.1.5+ Fix from $1,6002020-11-18 HIGH 8.8 CVE-2020-26217EPSS 85% XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands on… Debian Linux 1.4.14 / 5.15.14+ Fix from $1,9502020-11-16 MEDIUM 6.1 CVE-2020-25706 A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template im… Debian Linux Patch available Fix from $1,6002020-11-12