Read the docs

Debian

Records10171All Threatist records
Exploited (KEV)126In CISA KEV
CVSS critical1207CVSS 9.0–10.0
CVSS high4386CVSS 7.0–8.9

Exploited now

Debian records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2015-02923 ProFTPD Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-10-08TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2025-26358 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability Priority CRITICAL 100KEV 2026-09-18TI-2022-00413 Linux Kernel Improper Authentication Vulnerability Priority CRITICAL 93KEV 2026-06-02TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01

Components

Products in the NVD configurations · select one to filter the records
Debian Linux 10014 records CRITICAL Advanced Package Tool 21 records MEDIUM Dpkg 14 records MEDIUM Shadow 8 records LOW Lintian 6 records MEDIUM Apt 5 records MEDIUM Devscripts 3 records MEDIUM Horde 3 records MEDIUM

Records

3 records in Devscripts · all components

TI-2025-07740 CVE-2025-8454 · GHSA-mw9f-f52p-chpp

Improper signature verification in Debian devscripts

Priority MEDIUM 49

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP ver…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00275 Published 2025-08-01 No fix listed CWE-347
Open these records in search →