debian

Latest CVEs · RSS

• CVE-2026-11853 2026-06-10
  Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages (.dsc) and upload artifacts (.changes)
• CVE-2026-11852 2026-06-10
  Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are organized into artifacts. The en
• CVE-2026-2219 2026-03-07
  It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompres
• CVE-2025-8454 2025-08-01
  It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the li
• CVE-2025-6297 2025-07-01
  It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documente
• CVE-2015-0849 2025-06-26
  pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.
• CVE-2015-0843 2025-06-26
  yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.
• CVE-2015-0842 2025-06-26
  yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.
• CVE-2014-6274 2025-06-26
  git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS
• CVE-2014-7210 2025-06-26
  pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend
• CVE-2014-0468 2025-06-26
  Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM
• CVE-2013-1424 2025-06-26
  Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787.
• CVE-2022-2787 2022-08-27
  Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a sc
• CVE-2022-1664 2022-05-26
  Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerabi
• CVE-2016-1239 2022-02-19
  duck before 0.10 did not properly handle loading of untrusted code from the current directory.
• CVE-2022-0543 2022-02-18
  It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result
• CVE-2021-20001 2022-02-11
  It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the us
• CVE-2015-1877 2021-06-02
  The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote
• CVE-2020-3811 2020-05-26
  qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.
• CVE-2020-3812 2020-05-26
  qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories
• CVE-2020-3810 2020-05-15
  Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files
• CVE-2016-7524 2020-02-06
  coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
• CVE-2016-7523 2020-02-06
  coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
• CVE-2016-9928 2020-02-06
  MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd pa
• CVE-2013-1437 2020-01-28
  Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version valu