Debian records
10,234 published records for vendor Debian. 126 of them have been exploited in the wild (listed in CISA KEV) and 204 have a ready-made attack tool.
Researcher profile
- Entered KEV
- 126 · 1.2%
- Weaponized
- 204 · 2%
- Pre-auth RCE
- 754
- With a fix record
- 97.4%
- Median publish → KEV
- 364 days
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-416 Use After Free733
- CWE-787 Out-of-bounds Write730
- CWE-125 Out-of-bounds Read689
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer539
- CWE-20 Improper Input Validation501
- CWE-476 NULL Pointer Dereference477
The weakness classes this vendor ships most often: where to look.
CWEpython-apt
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
18Monitor | CVE-2019-15796No exploit | python-apt downloads from untrusted sourcesubuntu · python-apt · CWE-287 | Medium4.7 | 0.5%Mar 26, 2020 |
18Monitor | CVE-2019-15795No exploit | python-apt uses MD5 for validationubuntu · python-apt · CWE-327 | Medium4.7 | 0.4%Mar 26, 2020 |
- CVE-2019-1579618Monitor
python-apt downloads from untrusted sources
MediumCVSS 4.7No exploitEPSS 0%ubuntu · python-aptMar 26, 2020
- CVE-2019-1579518Monitor
python-apt uses MD5 for validation
MediumCVSS 4.7No exploitEPSS 0%ubuntu · python-aptMar 26, 2020