Debian Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-12	CVE-2022-27387	Classic Buffer Overflow vulnerability in multiple products MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements. network low complexity mariadb debian CWE-120	7.5
2022-04-12	CVE-2021-28544	Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. network low complexity apache debian fedoraproject apple	4.3
2022-04-12	CVE-2022-24070	Use After Free vulnerability in multiple products Subversion's mod_dav_svn is vulnerable to memory corruption. network low complexity apache debian fedoraproject apple CWE-416	7.5
2022-04-12	CVE-2022-24765	Git for Windows is a fork of Git containing Windows-specific patches. local low complexity git-scm fedoraproject apple debian	7.8
2022-04-12	CVE-2022-28346	SQL Injection vulnerability in multiple products An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. network low complexity djangoproject debian CWE-89 critical	9.8
2022-04-12	CVE-2022-28347	SQL Injection vulnerability in multiple products A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. network low complexity djangoproject debian CWE-89 critical	9.8
2022-04-11	CVE-2022-24836	Nokogiri is an open source XML and HTML library for Ruby. network low complexity nokogiri fedoraproject debian apple	7.5
2022-04-11	CVE-2022-28893	Use After Free vulnerability in multiple products The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state. local low complexity linux netapp debian CWE-416	7.8
2022-04-06	CVE-2022-24786	PJSIP is a free and open source multimedia communication library written in C. network low complexity pjsip debian critical	9.8
2022-04-06	CVE-2022-24793	PJSIP is a free and open source multimedia communication library written in C. network low complexity pjsip debian	7.5