Skip to content
OpenAdvisories

Ecosystem

Debian

61,926 known vulnerabilities.

Most affected packages

linux 20,203 chromium 5,914 linux-6.12 2,889 thunderbird 1,432 firefox-esr 1,430 webkit2gtk 960 imagemagick 867 wireshark 771 wpewebkit 597 xen 487 ffmpeg 442 qemu 442 gpac 393 wordpress 354 freerdp2 319 binutils 301 openssl 296 mediawiki 285 tiff 272 apache2 270 phpmyadmin 263 vim 258 freerdp3 248 asterisk 229 curl 222 samba 204 nvidia-graphics-drivers 198 tcpdump 187 cacti 175 glibc 173 clamav 169 ghostscript 168 python-django 164 bind9 159 wolfssl 151 xorg-server 151 openjdk-17 150 nvidia-graphics-drivers-tesla-470 148 graphicsmagick 147 golang-1.19 143
All Critical High Medium Low Exploited only Public exploit

288 results · Clear filters · Feed

  • Critical 9.8
    CVE-2014-6271 Exploited Public exploit Scanner template EPSS 100%

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

    bash bash Debian Ubuntu
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2014-0472 Public exploit

    Code Injection in Django

    The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using u…

    python-django django python-django Debian Ubuntu PyPI
  • Critical 9.0
    CVE-2013-5093 Public exploit EPSS 39%

    graphite-web is vulnerable to Remote Code Execution via renderLocalView function

    The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

    graphite-web graphite-web Debian PyPI
  • Critical 9.8
    CVE-2010-4344 Exploited Public exploit EPSS 72%

    Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to ex…

    exim4 Debian
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2009-4488 Public exploit EPSS 13%

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

    varnish varnish Debian Ubuntu
  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Critical 9.8
    CVE-2009-1151 Exploited Public exploit Scanner template EPSS 97%

    Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

    phpmyadmin Debian
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2007-3798 Public exploit EPSS 70%

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute ar…

    tcpdump Debian