Vulnerabilities > Debian > Debian Linux > High

DATE CVE VULNERABILITY TITLE RISK
2019-09-03 CVE-2019-15892 Reachable Assertion vulnerability in multiple products
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1.
7.5
2019-09-03 CVE-2019-14817 Incorrect Authorization vulnerability in multiple products
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.
7.8
2019-09-03 CVE-2019-14811 Incorrect Authorization vulnerability in multiple products
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.
7.8
2019-09-03 CVE-2015-9381 Out-of-bounds Read vulnerability in multiple products
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
network
low complexity
freetype debian CWE-125
8.8
2019-08-29 CVE-2019-14970 Out-of-bounds Write vulnerability in multiple products
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
local
low complexity
videolan debian CWE-787
7.8
2019-08-29 CVE-2019-14778 Use After Free vulnerability in multiple products
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
local
low complexity
videolan debian CWE-416
7.8
2019-08-29 CVE-2019-14777 Use After Free vulnerability in multiple products
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
local
low complexity
videolan debian CWE-416
7.8
2019-08-29 CVE-2019-14776 Out-of-bounds Read vulnerability in multiple products
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
local
low complexity
videolan debian CWE-125
7.8
2019-08-29 CVE-2019-14533 Use After Free vulnerability in multiple products
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
local
low complexity
videolan debian CWE-416
7.8
2019-08-29 CVE-2019-14535 Divide By Zero vulnerability in multiple products
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1.
local
low complexity
videolan debian CWE-369
7.8