🟢 Low ⏱ 5–15 min Last verified: 25 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11627 Upstream summary: gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15235 CVE-2020-8034 Upstream summary: The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5934 Upstream summary: The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3856 Upstream summary: The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0438 Upstream summary: eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0261 Upstream summary: fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1991 CVE-2013-2000 Upstream summary: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21813 CVE-2022-21814 CVE-2022-28181 CVE-2022-28183 CVE-2022-28184 CVE-2022-28185 CVE-2022-28191 CVE-2022-28192 +12 more Upstream summary: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling […]
🟡 Medium ⏱ 10–30 min Last verified: 23 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0023 CVE-2009-1955 CVE-2009-1956 CVE-2009-2412 CVE-2010-1623 CVE-2017-12618 CVE-2022-25147 Upstream summary: The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 23 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14822 Upstream summary: A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus […]
