DE
Vendor
Debian
10,182
CVEs
125
On KEV
1
New 30D
Products
GR10.0
graphicsmagick
Debian
9,997 CVEs124 on KEV1 new
RE10.0
redis
Debian
1 CVEs1 on KEV0 new
AP8.1
Advanced Package Tool
Debian
21 CVEs0 on KEV0 new
DP9.8
dpkg
Debian
14 CVEs0 on KEV0 new
SH7.8
Shadow
Debian
8 CVEs0 on KEV0 new
LI9.8
Lintian
Debian
6 CVEs0 on KEV0 new
AP5.5
Apt
Debian
5 CVEs0 on KEV0 new
DE9.8
devscripts
Debian
3 CVEs0 on KEV0 new
HO–
Horde
Debian
3 CVEs0 on KEV0 new
RE–
Reportbug
Debian
3 CVEs0 on KEV0 new
AP–
Apt-cacher
Debian
2 CVEs0 on KEV0 new
AP–
Aptlinex
Debian
2 CVEs0 on KEV0 new
CI–
Cifs-utils
Debian
2 CVEs0 on KEV0 new
DE6.5
debusine
Debian
2 CVEs0 on KEV0 new
DP–
Dpkg-dev
Debian
2 CVEs0 on KEV0 new
FR5.3
FreedomBox
Debian
2 CVEs0 on KEV0 new
FS–
Fsp
Debian
2 CVEs0 on KEV0 new
HG–
Horde Groupware
Debian
2 CVEs0 on KEV0 new
MI–
Mime-support
Debian
2 CVEs0 on KEV0 new
NE–
Netkit
Debian
2 CVEs0 on KEV0 new
PY4.7
Python-apt
Debian
2 CVEs0 on KEV0 new
PY–
Python-dns
Debian
2 CVEs0 on KEV0 new
QP–
Qpopper
Debian
2 CVEs0 on KEV0 new
XS–
Xsabre
Debian
2 CVEs0 on KEV0 new
YU9.8
Yubiserver
Debian
2 CVEs0 on KEV0 new
AD–
Adequate
Debian
1 CVEs0 on KEV0 new
AM–
Amaya
Debian
1 CVEs0 on KEV0 new
AP–
Apache
Debian
1 CVEs0 on KEV0 new
AP–
Apache2
Debian
1 CVEs0 on KEV0 new
AP–
Apt-listchanges
Debian
1 CVEs0 on KEV0 new
AP–
Apt-setup
Debian
1 CVEs0 on KEV0 new
AX–
Axiom
Debian
1 CVEs0 on KEV0 new
BA–
Backupninja
Debian
1 CVEs0 on KEV0 new
BA–
Base-config
Debian
1 CVEs0 on KEV0 new
BS–
Bsdmainutils
Debian
1 CVEs0 on KEV0 new
BS–
Bsmtpd
Debian
1 CVEs0 on KEV0 new
CF–
Cfingerd
Debian
1 CVEs0 on KEV0 new
CS–
Citadel Server
Debian
1 CVEs0 on KEV0 new
CO7.5
Courier-authlib
Debian
1 CVEs0 on KEV0 new
CR5.5
Cron
Debian
1 CVEs0 on KEV0 new
CR7.8
Crossroads
Debian
1 CVEs0 on KEV0 new
DB–
Dbd-firebird
Debian
1 CVEs0 on KEV0 new
DE–
Debian-goodies
Debian
1 CVEs0 on KEV0 new
DE7.8
Debian-lan-config
Debian
1 CVEs0 on KEV0 new
DE–
Debmake
Debian
1 CVEs0 on KEV0 new
DE7.8
Debmany
Debian
1 CVEs0 on KEV0 new
DE–
Devotee
Debian
1 CVEs0 on KEV0 new
DP–
Dpkg-cross
Debian
1 CVEs0 on KEV0 new
DU9.8
Duck
Debian
1 CVEs0 on KEV0 new
DU7.5
Duplicity
Debian
1 CVEs0 on KEV0 new
ET–
Elvis Tiny
Debian
1 CVEs0 on KEV0 new
EC–
Exuberant Ctags
Debian
1 CVEs0 on KEV0 new
FE–
Feta
Debian
1 CVEs0 on KEV0 new
FT9.1
Ftpsync
Debian
1 CVEs0 on KEV0 new
FU7.8
Fuse
Debian
1 CVEs0 on KEV0 new
GF–
Gfax
Debian
1 CVEs0 on KEV0 new
GU–
Guilt
Debian
1 CVEs0 on KEV0 new
HI–
Hivex
Debian
1 CVEs0 on KEV0 new
HC–
Honeyd Common
Debian
1 CVEs0 on KEV0 new
HI–
Horde Imp
Debian
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111497 In wildKEVNew | DL Debian Linux Debian | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder |
| CVE-2026-89169 | LI live-boot Debian | 4.1 | Sep 11 | live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing |
| CVE-2026-77118 | GR graphicsmagick Debian | 8.4 | Aug 20 | Out-of-bounds write in GraphicsMagick PCD decoder |
| CVE-2026-12996 | DL Debian Linux Debian | 8.1 | Jul 30 | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted… |
| CVE-2026-14355 | DL Debian Linux Debian | 5.3 | Jul 3 | ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD |
| CVE-2026-56968 | DL Debian Linux Debian | 5.3 | Jun 23 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server |
| CVE-2026-11853 | DE debusine Debian | 6.5 | Jun 10 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution |
| CVE-2026-11852 | DE debusine Debian | 6.5 | Jun 10 | Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution |
| CVE-2026-49975 | DL Debian Linux Debian | 7.5 | Jun 8 | Apache HTTP Server: mod_http2 denial of service |
| CVE-2026-9256 | DL Debian Linux Debian | 8.1 | May 22 | NGINX ngx_http_rewrite_module vulnerability |
| CVE-2026-46333 | DL Debian Linux Debian | 7.1 | May 15 | ptrace: slightly saner 'get_dumpable()' logic |
| CVE-2026-31431 In wildKEV | DL Debian Linux Debian | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place |
| CVE-2026-41082 | DL Debian Linux Debian | 7.8 | Apr 16 | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory |
| CVE-2026-34757 | DL Debian Linux Debian | 4.4 | Apr 9 | LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure |
| CVE-2026-4775 | DL Debian Linux Debian | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing |
| CVE-2026-1940 | DL Debian Linux Debian | 7.5 | Mar 23 | Gstreamer: incomplete fix of cve-2026-1940 |
| CVE-2025-63261 | DL Debian Linux Debian | 7.8 | Mar 20 | AWStats 8.0 is vulnerable to Command Injection via the open function |
| CVE-2026-3497 | DL Debian Linux Debian | 7.5 | Mar 12 | Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions |
| CVE-2026-2219 | DP dpkg Debian | 7.5 | Mar 7 | It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a… |
| CVE-2026-25506 | DL Debian Linux Debian | 7.8 | Feb 10 | MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery |
| CVE-2025-64098 | DL Debian Linux Debian | 5.9 | Feb 3 | FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled |
| CVE-2025-62799 | DL Debian Linux Debian | 9.8 | Feb 3 | FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE) |
| CVE-2025-62603 | DL Debian Linux Debian | 7.5 | Feb 3 | FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled |
| CVE-2025-62602 | DL Debian Linux Debian | 7.5 | Feb 3 | FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled |
| CVE-2025-62600 | DL Debian Linux Debian | 7.5 | Feb 3 | eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled |
| CVE-2025-62599 | DL Debian Linux Debian | 7.5 | Feb 3 | eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled |
| CVE-2026-25061 | DL Debian Linux Debian | 7.5 | Jan 29 | tcpflow has TIM Element OOB Write in wifipcap |
| CVE-2026-24765 | DL Debian Linux Debian | 7.8 | Jan 27 | PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling |
| CVE-2025-68670 | DL Debian Linux Debian | 9.8 | Jan 27 | xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow |
| CVE-2026-24061 In wildKEV | DL Debian Linux Debian | 9.8 | Jan 21 | GNU InetUtils Argument Injection Vulnerability |
| CVE-2026-23490 | DL Debian Linux Debian | 7.5 | Jan 16 | pyasn1 has a DoS vulnerability in decoder |
| CVE-2025-68615 | DL Debian Linux Debian | 9.8 | Dec 22 | Net-SNMP snmptrapd crash |
| CVE-2025-68462 | FR FreedomBox Debian | 3.2 | Dec 18 | Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases |
| CVE-2025-6966 | DL Debian Linux Debian | 5.5 | Dec 5 | Null-pointer dereference in python-apt TagSection.keys() |
| CVE-2025-63498 | DL Debian Linux Debian | 6.1 | Nov 24 | alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter |
| CVE-2025-64512 | DL Debian Linux Debian | 7.8 | Nov 10 | pdfminer.six vulnerable to Arbitrary Code Execution via Crafted PDF Input |
| CVE-2025-62230 | DL Debian Linux Debian | 7.3 | Oct 30 | Xorg: xwayland: use-after-free in xkb client resource removal |
| CVE-2025-62231 | DL Debian Linux Debian | 7.3 | Oct 30 | Xorg: xmayland: value overflow in xkbsetcompatmap() |
| CVE-2025-10934 | DL Debian Linux Debian | 7.8 | Oct 29 | GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-10922 | DL Debian Linux Debian | 7.8 | Oct 29 | GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-10921 | DL Debian Linux Debian | 7.8 | Oct 29 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-39923 | DL Debian Linux Debian | 5.5 | Oct 1 | dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees |
| CVE-2025-39920 | DL Debian Linux Debian | 5.5 | Oct 1 | pcmcia: Add error handling for add_interval() in do_validate_mem() |
| CVE-2025-39916 | DL Debian Linux Debian | 5.5 | Oct 1 | mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() |
| CVE-2025-39914 | DL Debian Linux Debian | 5.5 | Oct 1 | tracing: Silence warning when chunk allocation fails in trace_pid_write |
| CVE-2025-39913 | DL Debian Linux Debian | 7.8 | Oct 1 | tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. |
| CVE-2025-39911 | DL Debian Linux Debian | 7.8 | Oct 1 | i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path |
| CVE-2025-39909 | DL Debian Linux Debian | 5.5 | Oct 1 | mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() |
| CVE-2025-39907 | DL Debian Linux Debian | 5.5 | Oct 1 | mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer |
| CVE-2025-39902 | DL Debian Linux Debian | 5.5 | Oct 1 | mm/slub: avoid accessing metadata when pointer is invalid in object_err() |
| CVE-2025-39894 | DL Debian Linux Debian | 5.5 | Oct 1 | netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm |
| CVE-2025-39891 | DL Debian Linux Debian | 7.1 | Oct 1 | wifi: mwifiex: Initialize the chan_stats array to zero |
| CVE-2025-41244 In wildKEV | DL Debian Linux Debian | 7.8 | Sep 29 | VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246) |
| CVE-2025-39885 | DL Debian Linux Debian | 5.5 | Sep 23 | ocfs2: fix recursive semaphore deadlock in fiemap call |
| CVE-2025-39883 | DL Debian Linux Debian | 7.1 | Sep 23 | mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory |
| CVE-2025-39881 | DL Debian Linux Debian | 7.8 | Sep 23 | kernfs: Fix UAF in polling when open file is released |
| CVE-2025-39880 | DL Debian Linux Debian | 7.8 | Sep 23 | libceph: fix invalid accesses to ceph_connection_v1_info |
| CVE-2025-39877 | DL Debian Linux Debian | 7.8 | Sep 23 | mm/damon/sysfs: fix use-after-free in state_show() |
| CVE-2025-39876 | DL Debian Linux Debian | 5.5 | Sep 23 | net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() |
| CVE-2025-39873 | DL Debian Linux Debian | 7.8 | Sep 23 | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB |