🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0014 Upstream summary: Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20349 Upstream summary: The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) […]
🟠 High ⏱ 15–60 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7587 CVE-2018-7588 CVE-2018-7589 CVE-2018-7637 CVE-2018-7638 CVE-2018-7639 CVE-2018-7640 CVE-2018-7641 +7 more Upstream summary: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that […]
🟡 Medium ⏱ 10–30 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2013-1441 CVE-2015-3885 CVE-2015-8366 Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1932 CVE-2011-4675 Upstream summary: Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname […]
🟡 Medium ⏱ 10–30 min Last verified: 13 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0727 CVE-2013-7273 CVE-2015-7496 CVE-2016-1000002 CVE-2017-12164 CVE-2018-14424 CVE-2019-3825 CVE-2020-16125 +1 more Upstream summary: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 13 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1716 CVE-2013-4173 CVE-2015-1430 CVE-2016-2054 CVE-2016-2055 CVE-2016-2056 CVE-2016-2057 CVE-2016-2058 +8 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 13 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6122 CVE-2012-6123 CVE-2012-6124 CVE-2012-6125 CVE-2013-1874 CVE-2013-2024 CVE-2013-4385 CVE-2014-3776 +9 more Upstream summary: Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3514 Upstream summary: OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2671 Upstream summary: The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have […]
