Debian Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2022-08-18	CVE-2022-26373	Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. local low complexity intel debian	5.5
2022-08-18	CVE-2021-32862	Cross-site Scripting vulnerability in multiple products The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. network low complexity jupyter debian CWE-79	5.4
2022-08-17	CVE-2022-2867	libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. local low complexity libtiff fedoraproject debian	5.5
2022-08-17	CVE-2022-2868	Improper Validation of Specified Quantity in Input vulnerability in multiple products libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop. local low complexity libtiff fedoraproject debian CWE-1284	5.5
2022-08-17	CVE-2022-2869	libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. local low complexity libtiff fedoraproject debian	5.5
2022-08-15	CVE-2020-21365	Path Traversal vulnerability in multiple products Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations. network low complexity wkhtmltopdf debian CWE-22	7.5
2022-08-11	CVE-2022-20369	Out-of-bounds Write vulnerability in multiple products In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. local low complexity google debian CWE-787	6.7
2022-08-10	CVE-2021-37150	Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources. network low complexity apache debian fedoraproject	7.5
2022-08-10	CVE-2022-25763	Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. network low complexity apache debian fedoraproject	7.5
2022-08-10	CVE-2022-28129	Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. network low complexity apache debian fedoraproject	7.5