🟢 Low ⏱ 5–15 min Last verified: 20 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5718 Upstream summary: vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) […]
🟡 Medium ⏱ 10–30 min Last verified: 20 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4796 CVE-2008-7313 CVE-2014-5008 Upstream summary: The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) […]
🟢 Low ⏱ 5–15 min Last verified: 20 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2831 Upstream summary: Buffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root privileges via a large string in the XAUTHORITY environment variable. Table […]
🟢 Low ⏱ 5–15 min Last verified: 18 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0808 Upstream summary: as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or […]
🟢 Low ⏱ 5–15 min Last verified: 18 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26298 Upstream summary: Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. […]
🟢 Low ⏱ 5–15 min Last verified: 18 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6746 Upstream summary: telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the […]
🟢 Low ⏱ 5–15 min Last verified: 18 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-11880 Upstream summary: An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=…" parameter, a website (or other source of mailto links) can […]
🟢 Low ⏱ 5–15 min Last verified: 17 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3369 Upstream summary: The add_conversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via […]
🟡 Medium ⏱ 10–30 min Last verified: 17 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0871 CVE-2003-0211 CVE-2012-0862 CVE-2013-4342 Upstream summary: xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to […]
🟠 High ⏱ 15–60 min Last verified: 17 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3151 CVE-2005-3302 CVE-2005-4470 CVE-2007-1253 CVE-2008-1102 CVE-2008-1103 CVE-2008-4863 CVE-2009-3850 +12 more Upstream summary: Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a […]
