🟢 Low ⏱ 5–15 min Last verified: 22 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2538 Upstream summary: Cross-site scripting (XSS) vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20839 Upstream summary: systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or […]
🟢 Low ⏱ 5–15 min Last verified: 21 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16612 CVE-2021-3782 Upstream summary: libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It […]
🟡 Medium ⏱ 10–30 min Last verified: 21 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1498 CVE-2013-4366 CVE-2014-3577 CVE-2015-5262 CVE-2020-13956 Upstream summary: Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the […]
🟡 Medium ⏱ 10–30 min Last verified: 20 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0738 CVE-2002-1307 CVE-2002-1388 CVE-2010-1677 CVE-2010-4524 Upstream summary: MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script […]
🟢 Low ⏱ 5–15 min Last verified: 20 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-6393 Upstream summary: PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request […]
🟡 Medium ⏱ 10–30 min Last verified: 20 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0904 CVE-2011-0905 CVE-2011-1164 CVE-2011-1165 CVE-2012-4429 CVE-2013-5745 CVE-2014-6053 CVE-2018-7225 +1 more Upstream summary: The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x […]
🟠 High ⏱ 15–60 min Last verified: 20 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16899 CVE-2018-16140 CVE-2019-14275 CVE-2019-19555 CVE-2019-19746 CVE-2019-19797 CVE-2020-21529 CVE-2020-21530 +12 more Upstream summary: An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 19 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-12290 CVE-2019-18224 Upstream summary: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible […]
🟢 Low ⏱ 5–15 min Last verified: 19 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2939 CVE-2021-36770 Upstream summary: Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers […]
