Debian vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
331 matching records
- High7.2FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte imageOpen the advisoryOct 17, 2026
- High8.3FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset.Open the advisoryOct 17, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 1.06%Oct 16, 2026
- Low3.3Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded.Check if you run itEPSS 0.13%Oct 16, 2026
- Medium5.5Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBusCheck if you run itEPSS 0.10%Oct 16, 2026
- High7.1CVE-2026-57488Check if you run itEPSS 0.32%Oct 16, 2026
- Medium6.5CVE-2026-55862Check if you run itEPSS 0.38%Oct 16, 2026
- High7.5A flaw was found in spice-server.Check if you run itEPSS 0.25%Oct 16, 2026
- High7.5A flaw was found in spice-server.Check if you run itEPSS 0.40%Oct 16, 2026
- Medium6.6A flaw was found in Nautilus.Check if you run itEPSS 0.13%Oct 16, 2026
- Medium6.0A flaw was found in luksmeta.Check if you run itEPSS 0.11%Oct 16, 2026
- High7.8A flaw was found in cifs-utils.Check if you run itEPSS 0.15%Oct 16, 2026
- Medium6.8The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.Check if you run itEPSS 9.00%Oct 16, 2026
- High7.5sync 2026-10-16T15:41:51ZCheck if you run itEPSS 0.28%Oct 16, 2026
- Medium6.9libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium5.7zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped centr…Check if you run itEPSS 0.12%Oct 15, 2026
- Medium6.9libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via craft…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.9GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSe…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c.Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.8Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.9catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium6.9FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modula…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.31%Oct 15, 2026
Page 1 of 14Next