🟠 High ⏱ 15–60 min Last verified: 8 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0759 CVE-2009-2658 CVE-2010-2488 CVE-2010-2812 CVE-2010-2934 CVE-2012-0033 CVE-2013-2130 CVE-2014-9403 +6 more Upstream summary: Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify […]
🟢 Low ⏱ 5–15 min Last verified: 8 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9909 CVE-2016-9910 Upstream summary: The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) […]
🟢 Low ⏱ 5–15 min Last verified: 7 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-8331 Upstream summary: In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 7 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-0292 CVE-2010-0293 CVE-2010-0294 CVE-2012-4502 CVE-2012-4503 CVE-2014-0021 CVE-2015-1821 CVE-2015-1822 +3 more Upstream summary: The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 6 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟢 Low ⏱ 5–15 min Last verified: 6 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-2047 Upstream summary: The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated […]
🟠 High ⏱ 15–60 min Last verified: 6 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-12108 CVE-2017-12109 CVE-2017-12110 CVE-2017-12111 CVE-2017-2896 CVE-2017-2897 CVE-2017-2919 CVE-2018-20450 +8 more Upstream summary: An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a […]
🟠 High ⏱ 15–60 min Last verified: 6 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1745 CVE-2020-10018 CVE-2020-11793 CVE-2020-13543 CVE-2020-13558 CVE-2020-13584 CVE-2020-13753 CVE-2020-27918 +12 more Upstream summary: Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1628 CVE-2015-5186 Upstream summary: Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-6547 Upstream summary: schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors. Table […]
