🟢 Low ⏱ 5–15 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21772 Upstream summary: A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7694 CVE-2020-7695 Upstream summary: This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8400 CVE-2018-16789 Upstream summary: The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000871 CVE-2019-8937 CVE-2019-9084 CVE-2019-9085 CVE-2019-9086 CVE-2019-9087 CVE-2021-37832 CVE-2021-37833 +12 more Upstream summary: HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in […]
🟡 Medium ⏱ 10–30 min Last verified: 8 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4136 CVE-2014-1831 CVE-2015-7519 CVE-2016-10345 CVE-2017-16355 CVE-2018-12029 Upstream summary: ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership […]
🟠 High ⏱ 15–60 min Last verified: 8 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-21594 CVE-2020-21595 CVE-2020-21596 CVE-2020-21597 CVE-2020-21598 CVE-2020-21599 CVE-2020-21600 CVE-2020-21601 +12 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟠 High ⏱ 15–60 min Last verified: 7 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1336 CVE-2014-6053 CVE-2018-20021 CVE-2018-20022 CVE-2018-7225 CVE-2019-15678 CVE-2019-15679 CVE-2019-15680 +2 more Upstream summary: TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13032 CVE-2019-13241 Upstream summary: An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31081 Upstream summary: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to […]
🟠 High ⏱ 15–60 min Last verified: 7 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0981 CVE-2005-0397 CVE-2005-4601 CVE-2006-3743 CVE-2006-3744 CVE-2006-4144 CVE-2006-5456 CVE-2007-0770 +12 more Upstream summary: Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute […]
