Debian: >> Debian Linux >> 10.0 Security Vulnerabilities
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
CVSS Score
6.4
EPSS Score
0.015
Published
2019-11-22
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
CVSS Score
5.5
EPSS Score
0.007
Published
2019-11-21
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.
CVSS Score
7.0
EPSS Score
0.004
Published
2019-11-21
rc before 1.7.1-5 insecurely creates temporary files.
CVSS Score
7.5
EPSS Score
0.013
Published
2019-11-21
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.
CVSS Score
5.3
EPSS Score
0.014
Published
2019-11-21
The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.
CVSS Score
5.5
EPSS Score
0.003
Published
2019-11-21
pam_shield before 0.9.4: Default configuration does not perform protective action
CVSS Score
7.5
EPSS Score
0.013
Published
2019-11-21
mono 2.10.x ASP.NET Web Form Hash collision DoS
CVSS Score
7.5
EPSS Score
0.026
Published
2019-11-21
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.
CVSS Score
7.5
EPSS Score
0.025
Published
2019-11-20
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.
CVSS Score
7.5
EPSS Score
0.027
Published
2019-11-20