Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian linux vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2024-20952
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21....
Oracle Graalvm 21.3.8Oracle Graalvm 22.3.4Oracle Graalvm 20.3.12Oracle Jdk 17.0.9Oracle Jdk 21.0.1Oracle Jdk 11.0.21Oracle Jre 17.0.9Oracle Jre 21.0.1Oracle Jre 11.0.21Oracle Jre 1.8.0Oracle Jdk 1.8.0Oracle Graalvm For Jdk 17.0.9Oracle Graalvm For Jdk 21.0.1Netapp Oncommand Insight -Netapp Cloud Insights Acquisition Unit -Netapp Cloud Insights Storage Workload Security Agent -Debian Debian Linux 10.0
7
CVSSv3
CVE-2023-51780
An issue exists in the Linux kernel prior to 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.
Linux Linux Kernel 2.6.12Linux Linux Kernel 6.7Linux Linux KernelDebian Debian Linux 10.0
7
CVSSv3
CVE-2023-51781
An issue exists in the Linux kernel prior to 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition.
Linux Linux Kernel 2.6.12Linux Linux Kernel 6.7Linux Linux KernelDebian Debian Linux 10.0
7
CVSSv3
CVE-2023-51782
An issue exists in the Linux kernel prior to 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition.
Linux Linux Kernel 2.6.12Linux Linux Kernel 6.7Linux Linux KernelDebian Debian Linux 10.0
7.8
CVSSv3
CVE-2023-7101
Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue...
Jmcnamara Spreadsheet\\ \\Debian Debian Linux 10.0Fedoraproject Fedora 38Fedoraproject Fedora 39
5.3
CVSSv3
CVE-2023-51766
Exim prior to 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Ex...
Exim EximFedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Extra Packages For Enterprise Linux 9.0Fedoraproject Extra Packages For Enterprise Linux 7.0Fedoraproject Fedora 38Fedoraproject Fedora 39Debian Debian Linux 10.0
8.8
CVSSv3
CVE-2023-7024
Heap buffer overflow in WebRTC in Google Chrome before 120.0.6099.129 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Google ChromeDebian Debian Linux 11.0Debian Debian Linux 12.0Fedoraproject Fedora 38Fedoraproject Fedora 39
4.3
CVSSv3
CVE-2023-50761
The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not compare the signature creation date with the message date and time, and displayed a valid signature despite a date or time mismatc...
Mozilla ThunderbirdDebian Debian Linux 11.0Debian Debian Linux 12.0
4.3
CVSSv3
CVE-2023-50762
When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is because the text was interpreted as a MIME message and the first paragraph was always treated as an email header section. A digitally signe...
Mozilla ThunderbirdDebian Debian Linux 11.0Debian Debian Linux 12.0
8.8
CVSSv3
CVE-2023-6856
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an malicious user to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunde...
Mozilla ThunderbirdMozilla FirefoxMozilla Firefox EsrDebian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook