🟡 Medium ⏱ 10–30 min Last verified: 4 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6365 CVE-2015-7984 CVE-2016-2228 CVE-2017-16907 CVE-2019-12094 CVE-2019-12095 CVE-2020-8035 Upstream summary: Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 4 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17572 CVE-2019-20933 CVE-2022-36640 Upstream summary: InfluxDB 0.9.5 has Reflected XSS in the Write Data module. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 4 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9181 Upstream summary: perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which, when processed by an […]
🟢 Low ⏱ 5–15 min Last verified: 4 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-9497 CVE-2020-9498 Upstream summary: Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3357 Upstream summary: gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the […]
🟡 Medium ⏱ 10–30 min Last verified: 2 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0645 CVE-2005-2964 CVE-2005-2972 CVE-2006-4513 CVE-2017-17529 Upstream summary: Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 2 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2142 Upstream summary: Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows […]
🟡 Medium ⏱ 10–30 min Last verified: 2 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Upstream summary: libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the […]
🟢 Low ⏱ 5–15 min Last verified: 2 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0208 CVE-2012-0523 Upstream summary: Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, […]
