Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Debian_linux
(Debian)| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2020-03-27 | CVE-2020-10955 | GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders. | Debian_linux, Gitlab | 6.5 | ||
| 2021-06-09 | CVE-2020-24513 | Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | Debian_linux, Atom_c3308, Atom_c3336, Atom_c3338, Atom_c3338r, Atom_c3436l, Atom_c3508, Atom_c3538, Atom_c3558, Atom_c3558r, Atom_c3558rc, Atom_c3708, Atom_c3750, Atom_c3758, Atom_c3758r, Atom_c3808, Atom_c3830, Atom_c3850, Atom_c3858, Atom_c3950, Atom_c3955, Atom_c3958, Atom_p5942b, Atom_x5\-A3930, Atom_x5\-A3940, Atom_x5\-A3950, Atom_x5\-A3960, Atom_x6200fe, Atom_x6211e, Atom_x6212re, Atom_x6413e, Atom_x6425e, Atom_x6425re, Atom_x6427fe, Celeron_j3355, Celeron_j3355e, Celeron_j3455, Celeron_j3455e, Celeron_j4005, Celeron_j4025, Celeron_j4105, Celeron_j4125, Celeron_j6413, Celeron_n3350, Celeron_n3350e, Celeron_n3450, Celeron_n4000, Celeron_n4020, Celeron_n4100, Celeron_n4120, Celeron_n6211, Core_i3\-L13g4, Core_i5\-L16g7, P5921b, P5931b, P5962b, Pentium_j4205, Pentium_j6425, Pentium_n4200, Pentium_n4200e, Pentium_n6415, Pentium_silver_j5005, Pentium_silver_j5040, Pentium_silver_n5000, Pentium_silver_n5030, Simatic_drive_controller_firmware, Simatic_et_200sp_open_controller_firmware, Simatic_ipc127e_firmware | 6.5 | ||
| 2021-09-20 | CVE-2021-32272 | An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to cause Code Execution. | Debian_linux, Faad2 | 7.8 | ||
| 2021-09-20 | CVE-2021-32273 | An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to cause Code Execution. | Debian_linux, Faad2 | 7.8 | ||
| 2021-09-20 | CVE-2021-32274 | An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows an attacker to cause code Execution. | Debian_linux, Faad2 | 7.8 | ||
| 2021-09-20 | CVE-2021-32276 | An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service. | Debian_linux, Faad2 | 5.5 | ||
| 2021-09-20 | CVE-2021-32277 | An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 located in sbr_qmf.c. It allows an attacker to cause code Execution. | Debian_linux, Faad2 | 7.8 | ||
| 2021-09-20 | CVE-2021-32278 | An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in lt_predict.c. It allows an attacker to cause code Execution. | Debian_linux, Faad2 | 7.8 | ||
| 2021-10-06 | CVE-2021-41125 | Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the request target. This includes requests generated by Scrapy components, such as `robots.txt` requests sent by Scrapy when the `ROBOTSTXT_OBEY` setting is set to `True`, or as requests reached through redirects. Upgrade to Scrapy 2.5.1 and use the new... | Debian_linux, Scrapy | 6.5 | ||
| 2018-05-16 | CVE-2018-11212 | An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file. | Ubuntu_linux, Debian_linux, Libjpeg, Oncommand_unified_manager, Oncommand_workflow_automation, Snapmanager, Leap, Jdk, Jre, Enterprise_linux_desktop, Enterprise_linux_server, Enterprise_linux_workstation, Satellite | 6.5 |