Browse CVEs

MEDIUM 5.3 CVE-2021-32917 An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP accou… Debian Linux 0.11.9+ Fix from $1,6002021-05-13 HIGH 8.8 CVE-2020-29479 An issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the internal representation of the tree has special cases for t… Debian Linux after 4.14.0 Fix from $1,9502020-12-15 HIGH 8.8 CVE-2019-18610EPSS 30% An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenti… Debian Linux 13.29.2 / 16.6.2+ Fix from $1,9502019-11-22 MEDIUM 6.5 CVE-2019-18790 An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Ast… Debian Linux 13.29.2 / 16.6.2+ Fix from $1,6002019-11-22 MEDIUM 6.5 CVE-2019-12469 MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 an… Debian Linux 1.27.6 / 1.30.2+ Fix from $1,6002019-07-10 MEDIUM 6.5 CVE-2019-12470 Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 an… Debian Linux 1.27.6 / 1.30.2+ Fix from $1,6002019-07-10 MEDIUM 6.5 CVE-2019-10868 In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authe… Debian Linux 4.2.21 / 4.4.19+ Fix from $1,6002019-04-05 HIGH 7.8 CVE-2019-9924 rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permis… Debian Linux 4.4+ Fix from $1,9502019-03-22