Debian: >> Debian Linux >> 10.0 Security Vulnerabilities
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
CVSS Score
5.9
EPSS Score
0.01
Published
2019-11-01
MiniDLNA has heap-based buffer overflow
CVSS Score
9.8
EPSS Score
0.047
Published
2019-11-01
evince is missing a check on number of pages which can lead to a segmentation fault
CVSS Score
5.5
EPSS Score
0.012
Published
2019-11-01
MiniUPnPd has information disclosure use of snprintf()
CVSS Score
7.5
EPSS Score
0.023
Published
2019-11-01
Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."
CVSS Score
6.5
EPSS Score
0.013
Published
2019-10-31
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
CVSS Score
6.1
EPSS Score
0.016
Published
2019-10-31
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.
CVSS Score
7.3
EPSS Score
0.004
Published
2019-10-31
OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.
CVSS Score
8.8
EPSS Score
0.046
Published
2019-10-31
yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.
CVSS Score
9.8
EPSS Score
0.026
Published
2019-10-31
python-docutils allows insecure usage of temporary files
CVSS Score
9.1
EPSS Score
0.014
Published
2019-10-31