DE
Vendor
Debian
10,177
CVEs
124
On KEV
0
New 30D
Products
GR10.0
graphicsmagick
Debian
9,995 CVEs123 on KEV0 new
RE10.0
redis
Debian
1 CVEs1 on KEV0 new
AP8.1
Advanced Package Tool
Debian
21 CVEs0 on KEV0 new
DP9.8
Dpkg
Debian
14 CVEs0 on KEV0 new
SH7.8
Shadow
Debian
8 CVEs0 on KEV0 new
LI9.8
Lintian
Debian
6 CVEs0 on KEV0 new
AP5.5
Apt
Debian
5 CVEs0 on KEV0 new
DE9.8
Devscripts
Debian
3 CVEs0 on KEV0 new
HO–
Horde
Debian
3 CVEs0 on KEV0 new
RE–
Reportbug
Debian
3 CVEs0 on KEV0 new
AP–
Apt-cacher
Debian
2 CVEs0 on KEV0 new
AP–
Aptlinex
Debian
2 CVEs0 on KEV0 new
CI–
Cifs-utils
Debian
2 CVEs0 on KEV0 new
DE6.5
debusine
Debian
2 CVEs0 on KEV0 new
DP–
Dpkg-dev
Debian
2 CVEs0 on KEV0 new
FS–
Fsp
Debian
2 CVEs0 on KEV0 new
HG–
Horde Groupware
Debian
2 CVEs0 on KEV0 new
MI–
Mime-support
Debian
2 CVEs0 on KEV0 new
NE–
Netkit
Debian
2 CVEs0 on KEV0 new
PY4.7
Python-apt
Debian
2 CVEs0 on KEV0 new
PY–
Python-dns
Debian
2 CVEs0 on KEV0 new
QP–
Qpopper
Debian
2 CVEs0 on KEV0 new
XS–
Xsabre
Debian
2 CVEs0 on KEV0 new
YU9.8
Yubiserver
Debian
2 CVEs0 on KEV0 new
AD–
Adequate
Debian
1 CVEs0 on KEV0 new
AM–
Amaya
Debian
1 CVEs0 on KEV0 new
AP–
Apache
Debian
1 CVEs0 on KEV0 new
AP–
Apache2
Debian
1 CVEs0 on KEV0 new
AP–
Apt-listchanges
Debian
1 CVEs0 on KEV0 new
AP–
Apt-setup
Debian
1 CVEs0 on KEV0 new
AX–
Axiom
Debian
1 CVEs0 on KEV0 new
BA–
Backupninja
Debian
1 CVEs0 on KEV0 new
BA–
Base-config
Debian
1 CVEs0 on KEV0 new
BS–
Bsdmainutils
Debian
1 CVEs0 on KEV0 new
BS–
Bsmtpd
Debian
1 CVEs0 on KEV0 new
CF–
Cfingerd
Debian
1 CVEs0 on KEV0 new
CS–
Citadel Server
Debian
1 CVEs0 on KEV0 new
CO7.5
Courier-authlib
Debian
1 CVEs0 on KEV0 new
CR5.5
Cron
Debian
1 CVEs0 on KEV0 new
CR7.8
Crossroads
Debian
1 CVEs0 on KEV0 new
DB–
Dbd-firebird
Debian
1 CVEs0 on KEV0 new
DE–
Debian-goodies
Debian
1 CVEs0 on KEV0 new
DE7.8
Debian-lan-config
Debian
1 CVEs0 on KEV0 new
DE–
Debmake
Debian
1 CVEs0 on KEV0 new
DE7.8
Debmany
Debian
1 CVEs0 on KEV0 new
DE–
Devotee
Debian
1 CVEs0 on KEV0 new
DP–
Dpkg-cross
Debian
1 CVEs0 on KEV0 new
DU9.8
Duck
Debian
1 CVEs0 on KEV0 new
DU7.5
Duplicity
Debian
1 CVEs0 on KEV0 new
ET–
Elvis Tiny
Debian
1 CVEs0 on KEV0 new
EC–
Exuberant Ctags
Debian
1 CVEs0 on KEV0 new
FE–
Feta
Debian
1 CVEs0 on KEV0 new
FR5.3
Freedombox
Debian
1 CVEs0 on KEV0 new
FT9.1
Ftpsync
Debian
1 CVEs0 on KEV0 new
FU7.8
Fuse
Debian
1 CVEs0 on KEV0 new
GF–
Gfax
Debian
1 CVEs0 on KEV0 new
GU–
Guilt
Debian
1 CVEs0 on KEV0 new
HI–
Hivex
Debian
1 CVEs0 on KEV0 new
HC–
Honeyd Common
Debian
1 CVEs0 on KEV0 new
HI–
Horde Imp
Debian
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89169 | LI live-boot Debian | 4.1 | Sep 11 | live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing |
| CVE-2026-77118 | GR graphicsmagick Debian | 8.4 | Aug 20 | Out-of-bounds write in GraphicsMagick PCD decoder |
| CVE-2026-12996 | DL Debian Linux Debian | 8.1 | Jul 30 | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted… |
| CVE-2026-14355 | DL Debian Linux Debian | 5.3 | Jul 3 | ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD |
| CVE-2026-56968 | DL Debian Linux Debian | 5.3 | Jun 23 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server |
| CVE-2026-11853 | DE debusine Debian | 6.5 | Jun 10 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution |
| CVE-2026-11852 | DE debusine Debian | 6.5 | Jun 10 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution |
| CVE-2026-49975 | DL Debian Linux Debian | 7.5 | Jun 8 | Apache HTTP Server: mod_http2 denial of service |
| CVE-2026-9256 | DL Debian Linux Debian | 8.1 | May 22 | NGINX ngx_http_rewrite_module vulnerability |
| CVE-2026-46333 | DL Debian Linux Debian | 7.1 | May 15 | ptrace: slightly saner 'get_dumpable()' logic |
| CVE-2026-31431 In wildKEV | DL Debian Linux Debian | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place |
| CVE-2026-41082 | DL Debian Linux Debian | 7.8 | Apr 16 | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory |
| CVE-2026-34757 | DL Debian Linux Debian | 4.4 | Apr 9 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files |
| CVE-2026-4775 | DL Debian Linux Debian | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing |
| CVE-2026-1940 | DL Debian Linux Debian | 7.5 | Mar 23 | An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function |
| CVE-2025-63261 | DL Debian Linux Debian | 7.8 | Mar 20 | AWStats 8.0 is vulnerable to Command Injection via the open function |
| CVE-2026-3497 | DL Debian Linux Debian | 7.5 | Mar 12 | Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions |
| CVE-2026-2219 | DP Dpkg Debian | 7.5 | Mar 7 | It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a… |
| CVE-2026-25506 | DL Debian Linux Debian | 7.8 | Feb 10 | MUNGE is an authentication service for creating and validating user credentials |
| CVE-2025-64098 | DL Debian Linux Debian | 5.9 | Feb 3 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ) |
| CVE-2025-62799 | DL Debian Linux Debian | 9.8 | Feb 3 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ) |
| CVE-2025-62603 | DL Debian Linux Debian | 7.5 | Feb 3 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ) |
| CVE-2025-62602 | DL Debian Linux Debian | 7.5 | Feb 3 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ) |
| CVE-2025-62600 | DL Debian Linux Debian | 7.5 | Feb 3 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group) |
| CVE-2025-62599 | DL Debian Linux Debian | 7.5 | Feb 3 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group) |
| CVE-2026-25061 | DL Debian Linux Debian | 7.5 | Jan 29 | tcpflow is a TCP/IP packet demultiplexer |
| CVE-2026-24765 | DL Debian Linux Debian | 7.8 | Jan 27 | PHPUnit is a testing framework for PHP |
| CVE-2025-68670 | DL Debian Linux Debian | 9.8 | Jan 27 | xrdp is an open source RDP server |
| CVE-2026-24061 In wildKEV | DL Debian Linux Debian | 9.8 | Jan 21 | GNU InetUtils Argument Injection Vulnerability |
| CVE-2026-23490 | DL Debian Linux Debian | 7.5 | Jan 16 | pyasn1 is a generic ASN.1 library for Python |
| CVE-2025-68615 | DL Debian Linux Debian | 9.8 | Dec 23 | net-snmp is a SNMP application library, tools and daemon |
| CVE-2025-6966 | DL Debian Linux Debian | 5.5 | Dec 5 | NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822… |
| CVE-2025-63498 | DL Debian Linux Debian | 6.1 | Nov 24 | alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter |
| CVE-2025-64512 | DL Debian Linux Debian | 7.8 | Nov 10 | Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents |
| CVE-2025-62230 | DL Debian Linux Debian | 7.3 | Oct 30 | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup |
| CVE-2025-62231 | DL Debian Linux Debian | 7.3 | Oct 30 | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow |
| CVE-2025-10934 | DL Debian Linux Debian | 7.8 | Oct 29 | GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-10922 | DL Debian Linux Debian | 7.8 | Oct 29 | GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-10921 | DL Debian Linux Debian | 7.8 | Oct 29 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-39923 | DL Debian Linux Debian | 5.5 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees When we don't have a clock specified in… |
| CVE-2025-39920 | DL Debian Linux Debian | 5.5 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem(), the call to… |
| CVE-2025-39916 | DL Debian Linux Debian | 5.5 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() When creating a new scheme of… |
| CVE-2025-39914 | DL Debian Linux Debian | 5.5 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fails in trace_pid_write Syzkaller trigger a fault injection… |
| CVE-2025-39913 | DL Debian Linux Debian | 7.8 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork |
| CVE-2025-39911 | DL Debian Linux Debian | 7.8 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path If request_irq() in i40e_vsi_request_irq_msix()… |
| CVE-2025-39909 | DL Debian Linux Debian | 5.5 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() Patch series "mm/damon: avoid… |
| CVE-2025-39907 | DL Debian Linux Debian | 5.5 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer Avoid below overlapping mappings by using… |
| CVE-2025-39891 | DL Debian Linux Debian | 7.1 | Oct 1 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is initialized in… |
| CVE-2025-39902 | DL Debian Linux Debian | 5.5 | Oct 1 | mm/slub: avoid accessing metadata when pointer is invalid in object_err() |
| CVE-2025-39894 | DL Debian Linux Debian | 5.5 | Oct 1 | netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm |
| CVE-2025-41244 In wildKEV | DL Debian Linux Debian | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) |
| CVE-2025-39885 | DL Debian Linux Debian | 5.5 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive… |
| CVE-2025-39883 | DL Debian Linux Debian | 7.1 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure… |
| CVE-2025-39881 | DL Debian Linux Debian | 7.8 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerability was identified in… |
| CVE-2025-39877 | DL Debian Linux Debian | 7.8 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding… |
| CVE-2025-39876 | DL Debian Linux Debian | 5.5 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_find_device may… |
| CVE-2025-39873 | DL Debian Linux Debian | 7.8 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB can_put_echo_skb() takes ownership… |
| CVE-2025-39870 | DL Debian Linux Debian | 7.8 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs() The clean up in idxd_setup_wqs() has had a couple bugs… |
| CVE-2025-39869 | DL Debian Linux Debian | 7.1 | Sep 23 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map Fix a critical memory allocation bug… |
| CVE-2025-39880 | DL Debian Linux Debian | 7.8 | Sep 23 | libceph: fix invalid accesses to ceph_connection_v1_info |