🟢 Low ⏱ 5–15 min Last verified: 27 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40899 Upstream summary: An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5065 CVE-2011-1156 CVE-2011-1157 CVE-2011-1158 CVE-2012-2921 Upstream summary: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject […]
🟢 Low ⏱ 5–15 min Last verified: 26 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6614 Upstream summary: The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose […]
🟡 Medium ⏱ 10–30 min Last verified: 26 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0798 CVE-2009-4235 CVE-2011-1159 CVE-2011-2777 CVE-2011-4578 Upstream summary: ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by […]
🟢 Low ⏱ 5–15 min Last verified: 25 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-2383 CVE-2008-7220 Upstream summary: The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 25 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20164 CVE-2020-5243 Upstream summary: An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 25 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6419 CVE-2013-6433 CVE-2014-0056 CVE-2014-0071 CVE-2014-0187 CVE-2014-3555 CVE-2014-4167 CVE-2014-4615 +12 more Upstream summary: Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2145 CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 Upstream summary: The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-7185 CVE-2012-3355 Upstream summary: GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1849 CVE-2005-2096 Upstream summary: inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic […]
