Lucene search
+L
DebiancveRecent

61971 matches found

Debian CVE
Debian CVE
•added 2026/01/06 11:57 p.m.•12 views

CVE-2026-0628

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: High...

8.8CVSS5.7AI score0.06545EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2026/01/05 11:47 p.m.•8 views

CVE-2025-69230

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application, then an attacker may be able to trigger a storm of warning-level logs...

6.9CVSS7.5AI score0.00332EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 11:37 p.m.•7 views

CVE-2025-69229

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an application makes use of the request.read method in an endpoint, it...

8.7CVSS7.5AI score0.00338EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 11:30 p.m.•6 views

CVE-2025-69228

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a request to be crafted in such a way that an AIOHTTP server's memory fills up uncontrollably during processing. If an application includes a handler that uses the Request.post method, ...

8.7CVSS7.5AI score0.00347EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 11:19 p.m.•6 views

CVE-2025-69227

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an infinite loop to occur when assert statements are bypassed, resulting in a DoS attack when processing a POST body. If optimizations are enabled -O or PYTHONOPTIMIZE=1, and the...

8.7CVSS7.8AI score0.00337EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 11:16 p.m.•6 views

CVE-2025-69225

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below contain parser logic which allows non-ASCII decimals to be present in the Range header. There is no known impact, but there is the possibility that there's a method to exploit a request...

6.9CVSS7.5AI score0.00236EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 10:52 p.m.•7 views

CVE-2025-69226

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below enable an attacker to ascertain the existence of absolute path components through the path normalization logic for static files meant to prevent path traversal. If an application uses...

6.3CVSS7.5AI score0.00313EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 10:35 p.m.•7 views

CVE-2025-69224

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below of the Python HTTP parser may allow a request smuggling attack with the presence of non-ASCII characters. If a pure Python version of AIOHTTP is installed i.e. without the usual C extensions ...

6.5CVSS7.6AI score0.00213EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 10:0 p.m.•6 views

CVE-2025-69223

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory...

7.5CVSS6.7AI score0.00487EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:33 p.m.•7 views

CVE-2025-66648

vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites that allow users to supply untrusted user input, malicious use of an internal function not part of the public API could be used to run unintentional javascript XSS. This issue is...

7.2CVSS5.2AI score0.00184EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/05 9:22 p.m.•8 views

CVE-2025-65110

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

9.3CVSS6.1AI score0.00452EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/05 9:44 a.m.•7 views

CVE-2025-68765

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615mcuwtblstaadd In mt7615mcuwtblstaadd, an skb sskb is allocated. If the subsequent call to mt76connacmcuallocwtblreq fails, the function returns an error without freeing sskb, leading to a...

5.2AI score0.00161EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:44 a.m.•6 views

CVE-2025-68766

In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchpeicdomainalloc If irqdomaintranslatetwocell sets "hwirq" to = MCHPEICNIRQ 2 then it results in an out of bounds access. The code checks for invalid values, but doesn't set the error code...

5.2AI score0.00161EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:44 a.m.•7 views

CVE-2025-68764

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...

5.3AI score0.00182EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68763

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sgnentsforlen The return value of sgnentsforlen was assigned to an unsigned long in starfivehashdigest, causing negative error codes to be converted to large positive integers. Add...

5.3AI score0.00173EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•9 views

CVE-2025-68762

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error checks Prevent a kernel warning when netconsole setup fails on devices with IFFDISABLENETPOLL flag. The warning at kernel/workqueue.c:4242 in flushwork occurs because the cleanup...

5.2AI score0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68761

In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after free in hfscorrectnextunusedCNID This code calls hfsbnodeputnode which drops the refcount and then dreferences "node" on the next line. It's only safe to use "node" when we're holding a reference so...

5.3AI score0.00145EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•6 views

CVE-2025-68760

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iommummioshow In iommummiowrite, it validates the user-provided offset with the check: iommu-dbgmmiooffset iommu-mmiophysend - 4. This assumes a 4-byte access. However, the...

5.2AI score0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68759

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180initrxring In rtl8180initrxring, memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed...

5.3AI score0.00165EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•9 views

CVE-2025-68758

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links when the supplier is a class device. It...

5.2AI score0.00165EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•13 views

CVE-2025-68757

In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release A timer that expires a vgem fence automatically in 10 seconds is now released with timerdeletesync from fence-ops.release called on last dmafenceput. In some scenarios, it can run...

5.1AI score0.00165EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68756

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

5.4AI score0.00157EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•6 views

CVE-2025-68755

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e "staging: most: remove device from...

5.1AI score0.00157EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•9 views

CVE-2025-68753

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in putuser loop for DSP events In the DSP event handling code, a putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer...

5.4AI score0.00161EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68754

In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm The clock obtained via devmclkgetenabled is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clkdisableunprepare in error path and...

5.2AI score0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68752

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

5.1AI score0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/05 9:32 a.m.•8 views

CVE-2025-68751

In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpuvstl A false-positive kmsan report is detected when running ping command. An inline assembly instruction 'vstl' can write varied amount of bytes depending on value of 'index'...

5.2AI score0.00155EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/01/02 8:47 p.m.•9 views

CVE-2026-21452

MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java parses extension headers lazily, it later...

7.5CVSS7.8AI score0.0055EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/02 7:5 p.m.•33 views

CVE-2026-21444

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

5.5CVSS5.4AI score0.0007EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/02 12:0 a.m.•8 views

CVE-2025-67268

gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/drivernmea2000.c file. The hnd129540 function, which handles NMEA2000 PGN 129540 GNSS Satellites in View packets, fails to validate the user-supplied satellite count against the size of the skyview...

9.8CVSS5.8AI score0.00674EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2026/01/02 12:0 a.m.•7 views

CVE-2025-67269

An integer underflow vulnerability exists in the nextstate function in gpsd/packet.c of gpsd versions prior to commit ffa1d6f40bca0b035fc7f5e563160ebb67199da7. When parsing a NAVCOM packet, the payload length is calculated using lexer-length = sizetc - 4 without checking if the input byte c is le...

7.5CVSS5.4AI score0.0047EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2026/01/01 8:32 p.m.•8 views

CVE-2025-15412

A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. Such manipulation leads to out-of-bounds read. Local access is required to approac...

7.8CVSS4.9AI score0.00179EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/01 7:32 p.m.•8 views

CVE-2025-15411

A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. This manipulation causes memory corruption. It is possible to launch the attack on the loc...

7.8CVSS5.1AI score0.00179EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2026/01/01 5:54 p.m.•11 views

CVE-2026-21428

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the writeheaders function does not check for CR & LF characters in user supplied headers, allowing untrusted header value to escape header lines. This vulnerability allows attackers to add...

8.7CVSS5.3AI score0.00372EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2025/12/31 11:20 p.m.•7 views

CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS5.2AI score0.00241EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:39 p.m.•5 views

CVE-2025-34468

libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentiall...

9.8CVSS6.9AI score0.00637EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•4 views

CVE-2025-15279

FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS8.2AI score0.00259EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•5 views

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.8AI score0.00263EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•8 views

CVE-2025-15277

FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.8AI score0.00259EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•7 views

CVE-2025-15276

FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.9AI score0.00329EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•7 views

CVE-2025-15280

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.4AI score0.00532EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•9 views

CVE-2025-15275

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.4AI score0.0058EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•7 views

CVE-2025-15274

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.4AI score0.00579EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•8 views

CVE-2025-15273

FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.5AI score0.0058EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•9 views

CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS8.4AI score0.00579EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•11 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.00581EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•4 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.4AI score0.00581EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 6:58 a.m.•4 views

CVE-2025-15269

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

8.8CVSS8.4AI score0.00474EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 5:50 a.m.•3 views

CVE-2025-69277

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group...

4.5CVSS5.1AI score0.00166EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/12/31 1:15 a.m.•10 views

CVE-2025-68131

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Starting in version 3.0.0 and prior to version 5.8.0, whhen a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag 28 persist in memory an...

7.5CVSS7.6AI score0.00423EPSS
SaveExploits1
Total number of security vulnerabilities61971