Known vulnerabilities in spip (Debian package) 3.1.4-4~deb9u1
Vendor:
Debian
Software:
spip (Debian package)
Version:
3.1.4-4~deb9u1
Software CPE:
cpe:2.3:o:debian:spip_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Vulnerabilities by Severity
4.4.15+dfsg-0+deb13u1
4.4.13+dfsg-0+deb13u1
4.4.11+dfsg-0+deb13u1
3.1.4-4~deb9u4
3.1.4-4~deb9u4+deb9u1
3.1.4-4~deb9u4+deb9u2
3.1.4-4~deb9u5
3.2.4-1+deb10u10
3.2.4-1+deb10u11
3.2.4-1+deb10u12
3.2.4-1+deb10u13
3.2.8-2
3.2.9-1
3.2.11-1
3.2.11-2
3.2.11-3
3.2.11-3+deb11u8
3.2.11-3+deb11u9
3.2.11-3+deb11u10
3.2.12-1
4.0.1-1
4.0.2-1
4.0.4-1
4.0.5-1
4.1.0~alpha+dfsg-1
4.1.0~beta+dfsg-1
4.1.0~rc+dfsg-1
4.1.1+dfsg-1
4.1.2+dfsg-1
4.1.5+dfsg-1
4.1.7+dfsg-1
4.1.8+dfsg-1
4.1.9+dfsg-1
4.1.9+dfsg-1+deb12u1
4.1.9+dfsg-1+deb12u2
4.1.9+dfsg-1+deb12u4
4.1.10+dfsg-1
4.1.11+dfsg-1
4.1.12+dfsg-1
4.1.13+dfsg-1
4.1.15+dfsg-1
4.1.15+dfsg-2
4.2.2+dfsg-1
4.2.3+dfsg-1
4.2.4+dfsg-1
4.2.5+dfsg-1
4.2.6+dfsg-1
4.2.7+dfsg-1
4.2.8+dfsg-1
4.2.9+dfsg-1
4.2.9+dfsg-2
4.2.10+dfsg-1
4.2.11+dfsg-1
4.2.12+dfsg-1
4.2.13+dfsg-1
4.2.14+dfsg-1
4.3.0~alpha+dfsg-1
4.3.0~alpha.2+dfsg-1
4.3.0~beta+dfsg-1
4.3.0+dfsg-1
4.3.1+dfsg-1
4.3.2+dfsg-1
4.3.3+dfsg-1
4.3.4+dfsg-1
4.3.5+dfsg-1
4.3.6+dfsg-1
4.3.8+dfsg-1
4.4.2+dfsg-1
4.4.3+dfsg-1
4.4.4+dfsg-1
3.2.11-3+deb11u7
3.2.11-3+deb11u6
3.2.11-3+deb11u4
3.2.4-1+deb10u8
3.2.11-3+deb11u5
3.2.4-1+deb10u9
3.2.11-3+deb11u3
3.2.11-3+deb11u2
3.2.4-1+deb10u7
3.2.4-1+deb10u6
3.2.11-3+deb11u1
3.2.4-1+deb10u5
3.2.4-1+deb10u4
3.2.4-1+deb10u3
3.2.8
3.2.8-1
3.2.7
3.2.4
3.1.4
3.0.17
3.2.4-1+deb10u2
3.2.7-1
3.0.17-2+deb8u5
3.1.4-4~deb9u3
3.2.4-1+deb10u1
3.2.5-1
3.1.4-4~deb9u2
3.2.3-1
3.2.4-1
3.2.1-1
1.7.0-1
2.0.8-2~bpo50+1
2.0.9-1~bpo50+1
2.1-5~bpo50+1
2.1.1-3squeeze1
2.1.1-3squeeze2
2.1.1-3squeeze3
2.1.1-3squeeze4
2.1.1-3squeeze5
2.1.1-3squeeze6
2.1.1-3squeeze7
2.1.1-3squeeze8
2.1.1-3squeeze9
2.1.17-1+deb7u6
2.1.17-1+deb7u7
2.1.17-1+deb7u8
2.1.22-1
2.1.23-1
2.1.24-1
3.0.17-2+deb8u4
3.0.18-1
3.0.19-1
3.0.19-2
3.0.20-1
3.0.21-1
3.0.22-1
3.1.4-4~deb9u1
3.1.4-4
3.1.3-1
3.1.4-1
3.1.4-2
3.1.4-3
3.1.4-3~deb9u1
3.0.17-2+deb8u1
3.0.17-2+deb8u2
3.0.17-2+deb8u3
3.0.14-1
3.0.15-1
3.0.16-1
3.0.17-1
3.0.17-2
2.1.17-1+deb7u1
2.1.17-1+deb7u2
2.1.17-1+deb7u3
2.1.17-1+deb7u4
2.1.17-1+deb7u5
1.9.3~svn10413-1
1.9.3~svn10413-2
1.9.3~svn11152-1
1.9.3~svn11347-1
1.9.3~svn11347-2
1.9.3~svn12054-1
2.0.0~beta12262-1
2.0.0~beta12262-2
2.0.0-1
2.0.2-1
2.0.3-1
2.0.5-1
2.0.6-1
2.0.6-2
2.0.7-1
2.0.8-1
2.0.8-2
2.0.8-3
2.0.9-1
2.0.10-1
2.1-1
2.1-2
2.1-3
2.1-4
2.1-5
2.1-6
2.1.1-1
2.1.1-2
2.1.1-3
2.1.11-0.1
2.1.12-1
2.1.13-1
2.1.14-1
2.1.14-2
2.1.15-1
2.1.16-1
2.1.17-1
2.1.19-1
2.1.20-1
2.1.21-1
3.0.8-1
3.0.9-1
3.0.10-1
3.0.10-2
3.0.11-1
3.0.12-1
3.0.13-1
3.1~20970-1
3.1~21086-1
3.1~21100-1
3.1~21175-1
3.1~21281-1
3.1~21294-1
3.1~21361+dfsg-1
3.1~21406-1
3.1~21458-1
3.1~21513-1
3.1~21533-1
3.1~21775-1
3.1.0~alpha-1
3.1.0~beta-1
3.1.0~beta1-1
3.1.0~rc-1
3.1.0~rc3-1
3.1.0-1
3.1.1-1
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU21413 - Exposure of sensitive information to an unauthorized actor CVE-2019-16394 |
CWE-200 | Low | 3.1.4-4~deb9u3, 3.2.4-1+deb10u1 | 29.09.2019 |
SB2019092912 SB2019092913 SB2020092421 |
||
| #VU21412 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2019-16393 |
CWE-113 | Medium | 3.1.4-4~deb9u3, 3.2.4-1+deb10u1 | 29.09.2019 |
SB2019092912 SB2019092913 SB2020092421 |
||
| #VU21411 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-16392 |
CWE-79 | Low | 3.1.4-4~deb9u3, 3.2.4-1+deb10u1 | 29.09.2019 |
SB2019092912 SB2019092913 SB2020092421 |
||
| #VU21410 - Improper Access Control CVE-2019-16391 |
CWE-284 | Medium | 3.1.4-4~deb9u3, 3.2.4-1+deb10u1 | 29.09.2019 |
SB2019092912 SB2019092913 SB2020092421 |