🟢 Low ⏱ 5–15 min Last verified: 20 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0252 Upstream summary: Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in […]
🟠 High ⏱ 15–60 min Last verified: 20 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2399 CVE-2017-12143 CVE-2017-12145 CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 +2 more Upstream summary: Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 20 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000069 Upstream summary: FreePlane version 1.5.9 and earlier contains a XML External Entity (XXE) vulnerability in XML Parser in mindmap loader that can result in stealing data from […]
🟡 Medium ⏱ 10–30 min Last verified: 20 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0804 CVE-2010-1513 CVE-2010-2350 Upstream summary: Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 20 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1554 Upstream summary: kgb-bot 1.33-2 allows remote attackers to cause a denial of service (crash). Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
On Debian 8, the Apache2 web server stores its documents in /var/www/html by default. This directory is located on the root filesystem with the rest of the operating system. You may want to move the document root to another location, such as a separate mounted filesystem. In this guide, you’ll move the Apache document root to a new location by moving the files and changing Apache’s configuration files.
🟠 High ⏱ 15–60 min Last verified: 20 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3906 CVE-2014-9390 CVE-2014-9938 CVE-2015-7545 CVE-2016-2315 CVE-2016-2324 CVE-2017-1000117 CVE-2017-14867 +12 more Upstream summary: Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web […]
🟢 Low ⏱ 5–15 min Last verified: 19 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-1010057 CVE-2019-14459 Upstream summary: nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code […]
🟢 Low ⏱ 5–15 min Last verified: 19 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2073 CVE-2013-7110 Upstream summary: Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. Table […]
🟢 Low ⏱ 5–15 min Last verified: 19 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4339 CVE-2020-5208 Upstream summary: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, […]
