🟢 Low ⏱ 5–15 min Last verified: 26 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-12760 Upstream summary: A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that an […]
🟠 High ⏱ 15–60 min Last verified: 26 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4406 CVE-2013-2161 CVE-2013-4155 CVE-2014-0006 CVE-2014-3497 CVE-2014-7960 CVE-2015-1856 CVE-2015-5223 +4 more Upstream summary: OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11654 CVE-2017-11655 Upstream summary: An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3292 Upstream summary: The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, […]
🟠 High ⏱ 15–60 min Last verified: 26 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2050 CVE-2005-2643 CVE-2006-0414 CVE-2006-3407 CVE-2006-3408 CVE-2006-3409 CVE-2006-3410 CVE-2006-3411 +12 more Upstream summary: Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0048 Upstream summary: Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fragmented packets, possibly involving invalid headers and an […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-9206 Upstream summary: Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 25 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3137 CVE-2016-9964 CVE-2020-28473 CVE-2022-31799 Upstream summary: Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 25 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1801 CVE-2008-1802 CVE-2008-1803 CVE-2011-1595 CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 +12 more Upstream summary: Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0002 CVE-2012-5630 CVE-2012-5644 CVE-2015-3245 CVE-2015-3246 Upstream summary: libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes […]
