Debian

🟠 High   ⏱ 15–60 min  Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-16384 CVE-2019-11387 CVE-2019-11388 CVE-2019-11389 CVE-2019-11390 CVE-2019-11391 CVE-2019-13464 CVE-2020-22669  +8 more Upstream summary: A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through […]

🟠 High   ⏱ 15–60 min  Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-4494 CVE-2006-0517 CVE-2006-0518 CVE-2006-0519 CVE-2006-0625 CVE-2006-0626 CVE-2006-1295 CVE-2006-1702  +12 more Upstream summary: Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-4472 Upstream summary: The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-6960 CVE-2017-6961 CVE-2017-6962 Upstream summary: An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0074 Upstream summary: Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8807 CVE-2017-16907 Upstream summary: Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote […]

🟠 High   ⏱ 15–60 min  Last verified: 8 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-2163 CVE-2021-35556 CVE-2021-35559 CVE-2021-35561 CVE-2021-35564 CVE-2021-35567 CVE-2021-35578 CVE-2021-35586  +12 more Upstream summary: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java […]

🟠 High   ⏱ 15–60 min  Last verified: 8 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-0178 CVE-2013-0180 CVE-2013-7458 CVE-2015-4335 CVE-2015-8080 CVE-2016-10517 CVE-2016-2121 CVE-2016-8339  +12 more Upstream summary: Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm. Table of contents Symptom & […]