InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,508 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,508
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product debian:debian_linux. Show all products

947 CVEs, showing 351 to 400PreviousPage 8 of 19Next
CVESeverityTitlePublished
CVE-2023-5631
Known exploited
Medium 6.1Stored XSS vulnerability in Roundcube
Assigned by ESET
Oct 18, 2023
CVE-2023-45871High 7.5An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.
Assigned by mitre
Oct 15, 2023
CVE-2023-44487
Known exploited
High 7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Assigned by mitre
Oct 10, 2023
CVE-2023-42755Medium 6.5Kernel: rsvp: out-of-bounds read in rsvp_classify()
Assigned by redhat
Oct 5, 2023
CVE-2023-4911
Known exploited
High 7.8Glibc: buffer overflow in ld.so leading to privilege escalation
Assigned by redhat
Oct 3, 2023
CVE-2023-5217
Known exploited
High 8.8Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Assigned by Chrome
Sep 28, 2023
CVE-2023-41074High 8.8The issue was addressed with improved checks.Sep 27, 2023
CVE-2023-5197High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Sep 26, 2023
CVE-2023-42753High 7.0Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Assigned by redhat
Sep 25, 2023
CVE-2023-34319High 7.8Linux: buffer overrun in netback due to unusual packet
Assigned by XEN
Sep 22, 2023
CVE-2023-43770
Known exploited
Medium 6.1Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
Assigned by mitre
Sep 22, 2023
CVE-2023-41993
Known exploited
High 8.8The issue was addressed with improved checks.
Assigned by apple
Sep 21, 2023
CVE-2023-4921High 7.8Use-after-free in Linux kernel's net/sched: sch_qfq component
Assigned by Google
Sep 12, 2023
CVE-2023-4863
Known exploited
High 8.8Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
Assigned by Chrome
Sep 12, 2023
CVE-2023-4623High 7.8Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
Assigned by Google
Sep 6, 2023
CVE-2023-4015High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Sep 6, 2023
CVE-2023-3777High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Sep 6, 2023
CVE-2023-4762
Known exploited
High 8.8Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Assigned by Chrome
Sep 5, 2023
CVE-2023-20900High 7.1A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual ma…
Assigned by vmware
Aug 31, 2023
CVE-2022-44729High 7.1Apache XML Graphics Batik: Information disclosure vulnerability
Assigned by apache
Aug 22, 2023
CVE-2022-48560High 7.5A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Assigned by mitre
Aug 22, 2023
CVE-2020-19189Medium 6.5Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Assigned by mitre
Aug 22, 2023
CVE-2023-40283High 7.8An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.
Assigned by mitre
Aug 14, 2023
CVE-2023-4273Medium 6.0Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry
Assigned by redhat
Aug 9, 2023
CVE-2023-4004High 7.8Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Assigned by redhat
Jul 31, 2023
CVE-2023-3773Medium 5.5Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
Assigned by redhat
Jul 25, 2023
CVE-2023-3772Medium 5.5Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
Assigned by redhat
Jul 25, 2023
CVE-2023-3611High 7.8Out-of-bounds write in Linux kernel's net/sched: sch_qfq component
Assigned by Google
Jul 21, 2023
CVE-2023-3610High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Jul 21, 2023
CVE-2023-3609High 7.8Use-after-free in Linux kernel's net/sched: cls_u32 component
Assigned by Google
Jul 21, 2023
CVE-2023-35001High 7.8Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability
Assigned by canonical
Jul 5, 2023
CVE-2023-3338Medium 6.5Crash due to a null pointer dereference in the dn_nsp_send function
Assigned by redhat
Jun 30, 2023
CVE-2023-3389High 7.8Use after free in io_uring in the Linux Kernel
Assigned by Google
Jun 28, 2023
CVE-2023-3212Medium 4.4A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel.
Assigned by redhat
Jun 23, 2023
CVE-2023-3268High 7.1An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs.
Assigned by redhat
Jun 16, 2023
CVE-2023-20867
Known exploited
Low 3.9VMware Tools Authentication Bypass Vulnerability
Assigned by vmware
Jun 13, 2023
CVE-2023-3141High 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel.
Assigned by redhat
Jun 9, 2023
CVE-2023-34969Medium 6.5D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon.
Assigned by mitre
Jun 8, 2023
CVE-2023-3079
Known exploited
High 8.8Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Assigned by Chrome
Jun 5, 2023
CVE-2023-2650Medium 6.5Possible DoS translating ASN.1 object identifiers
Assigned by openssl
May 30, 2023
CVE-2023-2898Medium 4.7There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel.
Assigned by redhat
May 26, 2023
CVE-2023-2269Medium 4.4A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub…
Assigned by redhat
Apr 25, 2023
CVE-2023-29469Medium 6.5An issue was discovered in libxml2 before 2.10.4.
Assigned by mitre
Apr 24, 2023
CVE-2023-28484Medium 6.5In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault.
Assigned by mitre
Apr 24, 2023
CVE-2023-2136
Known exploited
Critical 9.6Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Assigned by Chrome
Apr 19, 2023
CVE-2023-2033
Known exploited
High 8.8Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Assigned by Chrome
Apr 14, 2023
CVE-2023-27535Medium 5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.
Assigned by hackerone
Mar 30, 2023
CVE-2023-27538High 7.7An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr…
Assigned by hackerone
Mar 30, 2023
CVE-2023-27536Medium 5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to che…
Assigned by hackerone
Mar 30, 2023
CVE-2023-1077High 7.0In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition woul…
Assigned by redhat
Mar 27, 2023
PreviousPage 8 of 19Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.