Latest vulnerabilities for vendor "debian"

oss-secOn the issue of MIME handlers that execute arbitrary code (e.g. Wine)

First published (updated )

https://seclists.org/oss-sec/2026/q2/613

SUSE Linux Enterprise ServerLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Risk 91

Severity

7.8

Exploited

Trending

Year

First published (updated )

CVE-2026-31431

libpng LIBPNGLIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure

Risk 34

Severity

5.1

First published (updated )

CVE-2026-34757

redhat Enterprise LinuxLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Risk 51

Severity

7.8

EPSS

0.10%

First published (updated )

CVE-2026-4775

Awstats AWStatsCommand Injection, OS Command Injection

Risk 69

Severity

7.8

First published (updated )

CVE-2025-63261

MUNGE MUNGEMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

Risk 53

Severity

7.8

EPSS

0.02%

First published (updated )

CVE-2026-25506

redhat Enterprise LinuxGstreamer: incomplete fix of cve-2026-1940

Risk 46

Severity

7.5

First published (updated )

CVE-2026-1940

eProsima Fast DDSFastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled

Risk 35

Severity

5.9

First published (updated )

CVE-2025-64098

eProsima Fast DDSFastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)

Risk 86

Severity

9.8

First published (updated )

CVE-2025-62799

eProsima Fast DDSFastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled

Risk 43

Severity

7.5

First published (updated )

CVE-2025-62603

eProsima Fast DDSFastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled

Risk 43

Severity

7.5

First published (updated )

CVE-2025-62602

eProsima Fast DDSeprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled

Risk 49

Severity

8.6

First published (updated )

CVE-2025-62600

eProsima Fast DDSeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled

Risk 49

Severity

8.6

First published (updated )

CVE-2025-62599

tcpflowtcpflow has TIM Element OOB Write in wifipcap

Risk 31

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2026-25061

composer/phpunit/phpunitPHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

Risk 51

Severity

7.8

EPSS

0.04%

First published (updated )

CVE-2026-24765

xrdpxrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2025-68670

GNU InetUtilsGNU InetUtils Argument Injection Vulnerability

Risk 99

Severity

9.8

Exploited

EPSS

76.94%

First published (updated )

CVE-2026-24061

pypi/pyasn1pyasn1 has a DoS vulnerability in decoder

Risk 31

Severity

7.5

EPSS

0.06%

First published (updated )

CVE-2026-23490

oss-secMany vulnerabilities in GnuPG

First published (updated )

https://seclists.org/oss-sec/2025/q4/313

Net-SNMP Net-SNMPNet-SNMP SnmpTrapd Agent Message Stack-based Buffer Overflow Remote Code Execution Vulnerability

Risk 92

Severity

9.8

First published (updated )

CVE-2025-68615

Ubuntu Python-aptNull-pointer dereference in python-apt TagSection.keys()

Risk 38

Severity

6.9

First published (updated )

CVE-2025-6966

Alinto SOGoXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2025-63498

pdfminer.six pdfminer.sixpdfminer.six vulnerable to Arbitrary Code Execution via Crafted PDF Input

Risk 70

Severity

8.6

First published (updated )

CVE-2025-64512

GIMP GIMPGIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 68

Severity

7.8

First published (updated )

CVE-2025-10934

GIMP GIMPGIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 68

Severity

7.8

First published (updated )

CVE-2025-10922

GIMP GIMPGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 68

Severity

7.8

First published (updated )

CVE-2025-10921

rplay (Mark R. Boyns) potential security issues (unsanitized data, unchecked malloc...)

First published (updated )

https://seclists.org/oss-sec/2025/q4/63

rplay (Mark R. Boyns) potential security issues (unsanitized data, unchecked malloc...)

First published (updated )

https://seclists.org/oss-sec/2025/q4/60

rplay (Mark R. Boyns) potential security issues (unsanitized data, unchecked malloc...)

First published (updated )

https://seclists.org/oss-sec/2025/q4/59

Linux Linux kerneldmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees

Risk 32

Severity

5.5

First published (updated )

CVE-2025-39923

Trending

Vendor Risk Score

Software

oss-secOn the issue of MIME handlers that execute arbitrary code (e.g. Wine)

SUSE Linux Enterprise ServerLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

libpng LIBPNGLIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure

redhat Enterprise LinuxLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Awstats AWStatsCommand Injection, OS Command Injection

Don't miss critical vulnerabilities

MUNGE MUNGEMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

redhat Enterprise LinuxGstreamer: incomplete fix of cve-2026-1940

eProsima Fast DDSFastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled

eProsima Fast DDSFastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)

eProsima Fast DDSFastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled

Don't miss critical vulnerabilities

eProsima Fast DDSFastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled

eProsima Fast DDSeprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled

eProsima Fast DDSeprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled

tcpflowtcpflow has TIM Element OOB Write in wifipcap

composer/phpunit/phpunitPHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

Don't miss critical vulnerabilities

xrdpxrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

GNU InetUtilsGNU InetUtils Argument Injection Vulnerability

pypi/pyasn1pyasn1 has a DoS vulnerability in decoder

oss-secMany vulnerabilities in GnuPG

Net-SNMP Net-SNMPNet-SNMP SnmpTrapd Agent Message Stack-based Buffer Overflow Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

Ubuntu Python-aptNull-pointer dereference in python-apt TagSection.keys()

Alinto SOGoXSS

pdfminer.six pdfminer.sixpdfminer.six vulnerable to Arbitrary Code Execution via Crafted PDF Input

GIMP GIMPGIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP GIMPGIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

GIMP GIMPGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

rplay (Mark R. Boyns) potential security issues (unsanitized data, unchecked malloc...)

rplay (Mark R. Boyns) potential security issues (unsanitized data, unchecked malloc...)

rplay (Mark R. Boyns) potential security issues (unsanitized data, unchecked malloc...)

Linux Linux kerneldmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees

Don't miss critical vulnerabilities

Company

Resources

Contact