Last scanned:
This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could run code as root on the agent by supplying a crafted repository or certificate, or stall CI builds by serving a malicious TLS certificate. Note: CVE-2024-32002 only applies when the agent clones untrusted repositories that contain submodules with symbolic link support enabled, but Jenkins agents routinely clone job repositories, so this input path is realistic. Because the container runs as root by default, any code execution flaw would have elevated impact. The image has 241 exposed findings, 17 of them at severity 7.0 or higher, with none recorded as known exploited, and its base OS (Debian 10.7) is end of support, so remediation is strongly recommended.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2024-32002 | HIGH8 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 29.2% High Exploitation Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2022-0778 | HIGH7.8 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u8 | 73.2% Actively Exploited | Directly ExposedContext importance: MEDIUM |
| CVE-2022-0778 | HIGH7.8 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u8 | 73.2% Actively Exploited | Directly ExposedContext importance: MEDIUM |
| CVE-2021-3326 | HIGH7.5 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 3.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-3326 | HIGH7.5 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 3.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-33560 | HIGH7.5 | libgcrypt20 1.8.4-5 No fix yet | 2.4% Low-Moderate Risk | Directly Exposed |
| CVE-2021-43618 | HIGH7.5 | libgmp10 2:6.1.2+dfsg-4 fixed in 2:6.1.2+dfsg-4+deb10u1 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2019-12290 | HIGH7.5 | libidn2-0 2.0.5-1+deb10u1 No fix yet | 3.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47554 | HIGH7.5 | commons-io:commons-io 2.5 fixed in 2.14.0 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2024-47554 | HIGH7.5 | commons-io:commons-io 2.6 fixed in 2.14.0 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2021-37714 | HIGH7.5 | org.jsoup:jsoup 1.12.1 fixed in 1.14.2 | 6.7% Low-Moderate Risk | Directly Exposed |
| CVE-2026-75140 | HIGH7.5 | org.jsoup:jsoup 1.12.1 fixed in 1.23.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2021-26291 | HIGH7.28 | org.apache.maven:maven-compat 3.6.3 fixed in 3.8.1 | 8.7% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2021-26291 | HIGH7.28 | org.apache.maven:maven-core 3.6.3 fixed in 3.8.1 | 8.7% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2019-1387 | HIGH7.04 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 4.4% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2022-39260 | HIGH7.04 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 4.0% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2025-67030 | HIGH7.04 | org.codehaus.plexus:plexus-utils 3.2.1 fixed in 4.0.3, 3.6.1 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2021-3999 | MEDIUM6.63 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2021-3999 | MEDIUM6.63 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2019-3843 | MEDIUM6.63 | libsystemd0 241-7~deb10u5 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2019-3844 | MEDIUM6.63 | libsystemd0 241-7~deb10u5 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2019-3843 | MEDIUM6.63 | libudev1 241-7~deb10u5 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2019-3844 | MEDIUM6.63 | libudev1 241-7~deb10u5 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2025-48924 | MEDIUM6.5 | org.apache.commons:commons-lang3 3.8.1 fixed in 3.18.0 | 2.6% Low-Moderate Risk | Directly Exposed |
| CVE-2022-24765 | MEDIUM6.24 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 1.0% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2023-29007 | MEDIUM6.24 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 5.6% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2024-32004 | MEDIUM6.24 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 1.4% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2024-32465 | MEDIUM6.24 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 1.0% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2022-23521 | MEDIUM6.11 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u7 | 56.3% Actively Exploited | Post-ExploitContext importance: MEDIUM |
| CVE-2022-36033 | MEDIUM6.1 | org.jsoup:jsoup 1.12.1 fixed in 1.15.3 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2019-1551 | MEDIUM6.09 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u5 | 14.3% High Exploitation Risk | Directly Exposed |
| CVE-2023-2976 | MEDIUM6.03 | com.google.guava:guava 25.1-android fixed in 32.0.0-android | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2021-40330 | MEDIUM6 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u4 | 2.9% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2023-23946 | MEDIUM6 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u8 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2020-1751 | MEDIUM5.95 | libc-bin 2.28-10 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2020-1752 | MEDIUM5.95 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2020-1751 | MEDIUM5.95 | libc6 2.28-10 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2020-1752 | MEDIUM5.95 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2016-10228 | MEDIUM5.9 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-25013 | MEDIUM5.9 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 3.6% Low-Moderate Risk | Directly Exposed |
| CVE-2023-4806 | MEDIUM5.9 | libc-bin 2.28-10 No fix yet | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2023-4813 | MEDIUM5.9 | libc-bin 2.28-10 No fix yet | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2016-10228 | MEDIUM5.9 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-25013 | MEDIUM5.9 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 3.6% Low-Moderate Risk | Directly Exposed |
| CVE-2023-4806 | MEDIUM5.9 | libc6 2.28-10 No fix yet | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2023-4813 | MEDIUM5.9 | libc6 2.28-10 No fix yet | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2021-40528 | MEDIUM5.9 | libgcrypt20 1.8.4-5 fixed in 1.8.4-5+deb10u1 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2021-23841 | MEDIUM5.9 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u5 | 7.4% Low-Moderate Risk | Directly Exposed |
| CVE-2021-4160 | MEDIUM5.9 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u8 | 3.8% Low-Moderate Risk | Directly Exposed |
| CVE-2022-29599 | MEDIUM5.88 | org.apache.maven.shared:maven-shared-utils 3.2.1 fixed in 3.3.3 | 4.4% Low-Moderate Risk | Directly Exposed |
| CVE-2024-32021 | MEDIUM5.68 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 1.0% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2024-4741 | MEDIUM5.6 | libssl1.1 1.1.1d-0+deb10u4 No fix yet | 2.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-29425 | MEDIUM5.52 | commons-io:commons-io 2.5 fixed in 2.7 | 10.5% High Exploitation Risk | Directly Exposed |
| CVE-2021-29425 | MEDIUM5.52 | commons-io:commons-io 2.6 fixed in 2.7 | 10.5% High Exploitation Risk | Directly Exposed |
| CVE-2024-0727 | MEDIUM5.5 | libssl1.1 1.1.1d-0+deb10u4 No fix yet | 3.2% Low-Moderate Risk | Directly Exposed |
| CVE-2021-33910 | MEDIUM5.5 | libsystemd0 241-7~deb10u5 fixed in 241-7~deb10u8 | 8.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-3997 | MEDIUM5.5 | libsystemd0 241-7~deb10u5 No fix yet | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-33910 | MEDIUM5.5 | libudev1 241-7~deb10u5 fixed in 241-7~deb10u8 | 8.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-3997 | MEDIUM5.5 | libudev1 241-7~deb10u5 No fix yet | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2019-13627 | MEDIUM5.35 | libgcrypt20 1.8.4-5 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2022-29187 | MEDIUM5.3 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2024-33600 | MEDIUM5.3 | libc-bin 2.28-10 fixed in 2.28-10+deb10u4 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-33600 | MEDIUM5.3 | libc6 2.28-10 fixed in 2.28-10+deb10u4 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-14155 | MEDIUM5.3 | libpcre3 2:8.39-12 No fix yet | 4.2% Low-Moderate Risk | Directly Exposed |
| CVE-2022-2097 | MEDIUM5.3 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 4.9% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0465 | MEDIUM5.3 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0466 | MEDIUM5.3 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-3446 | MEDIUM5.3 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u6 | 6.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-3817 | MEDIUM5.3 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u6 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-5678 | MEDIUM5.3 | libssl1.1 1.1.1d-0+deb10u4 No fix yet | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-13956 | MEDIUM5.3 | org.apache.httpcomponents:httpclient 4.5.9 fixed in 4.5.13, 5.0.3 | 9.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27533 | MEDIUM5.28 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27534 | MEDIUM5.28 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u9 | 2.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27533 | MEDIUM5.28 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27534 | MEDIUM5.28 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u9 | 2.4% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27533 | MEDIUM5.28 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27534 | MEDIUM5.28 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u9 | 2.4% Low-Moderate Risk | Directly Exposed |
| CVE-2022-1271 | MEDIUM5.28 | liblzma5 5.2.4-1 fixed in 5.2.4-1+deb10u1 | 5.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-24407 | MEDIUM5.28 | libsasl2-2 2.1.27+dfsg-1+deb10u1 fixed in 2.1.27+dfsg-1+deb10u2 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2022-24407 | MEDIUM5.28 | libsasl2-modules 2.1.27+dfsg-1+deb10u1 fixed in 2.1.27+dfsg-1+deb10u2 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2022-24407 | MEDIUM5.28 | libsasl2-modules-db 2.1.27+dfsg-1+deb10u1 fixed in 2.1.27+dfsg-1+deb10u2 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2024-2398 | MEDIUM5.17 | curl 7.64.0-4+deb10u1 No fix yet | 36.1% High Exploitation Risk | Directly Exposed |
| CVE-2024-2398 | MEDIUM5.17 | libcurl3-gnutls 7.64.0-4+deb10u1 No fix yet | 36.1% High Exploitation Risk | Directly Exposed |
| CVE-2024-2398 | MEDIUM5.17 | libcurl4 7.64.0-4+deb10u1 No fix yet | 36.1% High Exploitation Risk | Directly Exposed |
| CVE-2023-7008 | MEDIUM5.02 | libsystemd0 241-7~deb10u5 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2023-7008 | MEDIUM5.02 | libudev1 241-7~deb10u5 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2022-22576 | MEDIUM4.86 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 2.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12886 | MEDIUM4.86 | gcc-8-base 8.3.0-6 No fix yet | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2020-6096 | MEDIUM4.86 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 5.5% Low-Moderate Risk | Directly Exposed |
| CVE-2020-6096 | MEDIUM4.86 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 5.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-22576 | MEDIUM4.86 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 2.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-22576 | MEDIUM4.86 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 2.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12886 | MEDIUM4.86 | libgcc1 1:8.3.0-6 No fix yet | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20305 | MEDIUM4.86 | libhogweed4 3.4.1-1 fixed in 3.4.1-1+deb10u1 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-20305 | MEDIUM4.86 | libnettle6 3.4.1-1 fixed in 3.4.1-1+deb10u1 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-31484 | MEDIUM4.86 | libperl5.28 5.28.1-6+deb10u1 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2018-12886 | MEDIUM4.86 | libstdc++6 8.3.0-6 No fix yet | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-31484 | MEDIUM4.86 | perl-base 5.28.1-6+deb10u1 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-31484 | MEDIUM4.86 | perl-modules-5.28 5.28.1-6+deb10u1 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2024-2511 | MEDIUM4.81 | libssl1.1 1.1.1d-0+deb10u4 No fix yet | 52.4% Actively Exploited | Directly Exposed |
| CVE-2020-8177 | MEDIUM4.68 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8177 | MEDIUM4.68 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8177 | MEDIUM4.68 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2023-26604 | MEDIUM4.68 | libsystemd0 241-7~deb10u5 fixed in 241-7~deb10u9 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-26604 | MEDIUM4.68 | libudev1 241-7~deb10u5 fixed in 241-7~deb10u9 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2021-37600 | MEDIUM4.67 | libblkid1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2020-10029 | MEDIUM4.67 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2020-27618 | MEDIUM4.67 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2020-10029 | MEDIUM4.67 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2020-27618 | MEDIUM4.67 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2021-37600 | MEDIUM4.67 | libfdisk1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2021-37600 | MEDIUM4.67 | libmount1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2021-37600 | MEDIUM4.67 | libsmartcols1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2022-3821 | MEDIUM4.67 | libsystemd0 241-7~deb10u5 fixed in 241-7~deb10u10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2022-4415 | MEDIUM4.67 | libsystemd0 241-7~deb10u5 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2022-3821 | MEDIUM4.67 | libudev1 241-7~deb10u5 fixed in 241-7~deb10u10 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2022-4415 | MEDIUM4.67 | libudev1 241-7~deb10u5 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2021-37600 | MEDIUM4.67 | libuuid1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2021-24031 | MEDIUM4.67 | libzstd1 1.3.8+dfsg-3 fixed in 1.3.8+dfsg-3+deb10u1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2023-48795 | MEDIUM4.6 | openssh-client 1:7.9p1-10+deb10u2 fixed in 1:7.9p1-10+deb10u4 | 93.5% Actively Exploited | Directly Exposed |
| CVE-2022-29155 | MEDIUM4.58 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u7 | 64.5% Actively Exploited | Post-Exploit |
| CVE-2022-29155 | MEDIUM4.58 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u7 | 64.5% Actively Exploited | Post-Exploit |
| CVE-2021-3711 | MEDIUM4.58 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u7 | 87.8% Actively Exploited | Post-Exploit |
| CVE-2023-38408 | MEDIUM4.58 | openssh-client 1:7.9p1-10+deb10u2 fixed in 1:7.9p1-10+deb10u3 | 79.7% Actively Exploited | Post-Exploit |
| CVE-2021-3711 | MEDIUM4.58 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u7 | 87.8% Actively Exploited | Post-Exploit |
| CVE-2024-33599 | MEDIUM4.56 | libc-bin 2.28-10 fixed in 2.28-10+deb10u4 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2024-33599 | MEDIUM4.56 | libc6 2.28-10 fixed in 2.28-10+deb10u4 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8169 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8231 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8285 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 9.8% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8286 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22946 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27781 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 2.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27782 | MEDIUM4.5 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 3.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-15847 | MEDIUM4.5 | gcc-8-base 8.3.0-6 No fix yet | 3.2% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8169 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8231 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8285 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 9.8% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8286 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22946 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27781 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 2.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27782 | MEDIUM4.5 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 3.1% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8169 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.9% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8231 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8285 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 9.8% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8286 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 4.6% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22946 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27781 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 2.9% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27782 | MEDIUM4.5 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 3.1% Low-Moderate Risk | Directly Exposed |
| CVE-2019-15847 | MEDIUM4.5 | libgcc1 1:8.3.0-6 No fix yet | 3.2% Low-Moderate Risk | Directly Exposed |
| CVE-2021-3580 | MEDIUM4.5 | libhogweed4 3.4.1-1 fixed in 3.4.1-1+deb10u1 | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2021-3580 | MEDIUM4.5 | libnettle6 3.4.1-1 fixed in 3.4.1-1+deb10u1 | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0464 | MEDIUM4.5 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 4.0% Low-Moderate Risk | Directly Exposed |
| CVE-2019-15847 | MEDIUM4.5 | libstdc++6 8.3.0-6 No fix yet | 3.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-0464 | MEDIUM4.5 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 4.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-32206 | MEDIUM4.48 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 36.3% High Exploitation Risk | Directly Exposed |
| CVE-2022-32206 | MEDIUM4.48 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 36.3% High Exploitation Risk | Directly Exposed |
| CVE-2022-32206 | MEDIUM4.48 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 36.3% High Exploitation Risk | Directly Exposed |
| CVE-2023-51385 | MEDIUM4.48 | openssh-client 1:7.9p1-10+deb10u2 fixed in 1:7.9p1-10+deb10u4 | 19.8% High Exploitation Risk | Directly Exposed |
| CVE-2022-39253 | MEDIUM4.4 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 1.5% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2024-28085 | MEDIUM4.4 | libblkid1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-28085 | MEDIUM4.4 | libfdisk1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-28085 | MEDIUM4.4 | libmount1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-28085 | MEDIUM4.4 | libsmartcols1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2024-28085 | MEDIUM4.4 | libuuid1 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2021-41617 | MEDIUM4.2 | openssh-client 1:7.9p1-10+deb10u2 fixed in 1:7.9p1-10+deb10u4 | 2.5% Low-Moderate Risk | Directly Exposed |
| CVE-2024-2961 | MEDIUM4.12 | libc-bin 2.28-10 fixed in 2.28-10+deb10u3 | 88.3% Actively Exploited | Post-Exploit |
| CVE-2024-2961 | MEDIUM4.12 | libc6 2.28-10 fixed in 2.28-10+deb10u3 | 88.3% Actively Exploited | Post-Exploit |
| CVE-2022-4304 | MEDIUM4.07 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 23.5% High Exploitation Risk | Directly Exposed |
| CVE-2022-41903 | MEDIUM4.06 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u7 | 44.3% High Exploitation Risk | Post-Exploit |
| CVE-2019-8457 | MEDIUM4.06 | libdb5.3 5.3.28+dfsg1-0.5 No fix yet | 45.4% High Exploitation Risk | Post-Exploit |
| CVE-2022-25236 | MEDIUM4.06 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u3 | 35.3% High Exploitation Risk | Post-Exploit |
| CVE-2021-31535 | MEDIUM4.06 | libx11-6 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u2 | 10.6% High Exploitation Risk | Post-Exploit |
| CVE-2021-31535 | MEDIUM4.06 | libx11-data 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u2 | 10.6% High Exploitation Risk | Post-Exploit |
| CVE-2022-37434 | MEDIUM4.06 | zlib1g 1:1.2.11.dfsg-1 fixed in 1:1.2.11.dfsg-1+deb10u2 | 19.2% High Exploitation Risk | Post-Exploit |
| CVE-2021-24032 | MEDIUM4 | libzstd1 1.3.8+dfsg-3 fixed in 1.3.8+dfsg-3+deb10u2 | 0.3% Theoretical Threat | Directly Exposed |
| DLA-3112-1 | MEDIUM4 | libbz2-1.0 1.0.6-9.2~deb10u1 fixed in 1.0.6-9.2~deb10u2 | — | Directly Exposed |
| CVE-2024-33601 | MEDIUM4 | libc-bin 2.28-10 fixed in 2.28-10+deb10u4 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2024-33601 | MEDIUM4 | libc6 2.28-10 fixed in 2.28-10+deb10u4 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2020-16156 | LOW3.98 | libperl5.28 5.28.1-6+deb10u1 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2020-16156 | LOW3.98 | perl 5.28.1-6+deb10u1 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2020-16156 | LOW3.98 | perl-base 5.28.1-6+deb10u1 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2020-16156 | LOW3.98 | perl-modules-5.28 5.28.1-6+deb10u1 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2022-27776 | LOW3.9 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-23916 | LOW3.9 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u5 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-46218 | LOW3.9 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u8 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2022-34903 | LOW3.9 | gpgv 2.2.12-1+deb10u1 fixed in 2.2.12-1+deb10u2 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-27776 | LOW3.9 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-23916 | LOW3.9 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u5 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-46218 | LOW3.9 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u8 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27776 | LOW3.9 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-23916 | LOW3.9 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u5 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-46218 | LOW3.9 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u8 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-22490 | LOW3.74 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u8 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2019-1551 | LOW3.66 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u5 | 14.3% High Exploitation Risk | Post-Exploit |
| CVE-2024-43044 | LOW3.64 | org.jenkins-ci.main:remoting 4.6 fixed in 3206.3208, 3248.3250, 3256.3258 | 28.8% High Exploitation Risk | Post-Exploit |
| CVE-2021-22947 | LOW3.54 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-32208 | LOW3.54 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2022-43552 | LOW3.54 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27535 | LOW3.54 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27536 | LOW3.54 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-28321 | LOW3.54 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u7 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22947 | LOW3.54 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-32208 | LOW3.54 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2022-43552 | LOW3.54 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27535 | LOW3.54 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27536 | LOW3.54 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-28321 | LOW3.54 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u7 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22947 | LOW3.54 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 3.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-32208 | LOW3.54 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 8.4% Low-Moderate Risk | Directly Exposed |
| CVE-2022-43552 | LOW3.54 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 2.7% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27535 | LOW3.54 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27536 | LOW3.54 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-28321 | LOW3.54 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u7 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2021-23841 | LOW3.54 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u5 | 7.4% Low-Moderate Risk | Post-Exploit |
| CVE-2021-4160 | LOW3.54 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u8 | 3.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-32221 | LOW3.53 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 5.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1664 | LOW3.53 | dpkg 1.19.7 fixed in 1.19.8 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-33574 | LOW3.53 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 3.5% Low-Moderate Risk | Post-Exploit |
| CVE-2022-23218 | LOW3.53 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 5.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-23219 | LOW3.53 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 4.7% Low-Moderate Risk | Post-Exploit |
| CVE-2021-33574 | LOW3.53 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 3.5% Low-Moderate Risk | Post-Exploit |
| CVE-2022-23218 | LOW3.53 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 5.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-23219 | LOW3.53 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 4.7% Low-Moderate Risk | Post-Exploit |
| CVE-2022-32221 | LOW3.53 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 5.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-32221 | LOW3.53 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 5.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-22822 | LOW3.53 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 5.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-22823 | LOW3.53 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 3.6% Low-Moderate Risk | Post-Exploit |
| CVE-2022-22824 | LOW3.53 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 3.6% Low-Moderate Risk | Post-Exploit |
| CVE-2022-23852 | LOW3.53 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 5.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-25235 | LOW3.53 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u3 | 5.0% Low-Moderate Risk | Post-Exploit |
| CVE-2022-25315 | LOW3.53 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u3 | 4.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-27404 | LOW3.53 | libfreetype6 2.9.1-3+deb10u2 fixed in 2.9.1-3+deb10u3 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2021-20231 | LOW3.53 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u7 | 3.6% Low-Moderate Risk | Post-Exploit |
| CVE-2021-20232 | LOW3.53 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u7 | 3.3% Low-Moderate Risk | Post-Exploit |
| CVE-2021-3520 | LOW3.53 | liblz4-1 1.8.3-1 fixed in 1.8.3-1+deb10u1 | 3.4% Low-Moderate Risk | Post-Exploit |
| CVE-2023-45853 | LOW3.53 | zlib1g 1:1.2.11.dfsg-1 No fix yet | 3.4% Low-Moderate Risk | Post-Exploit |
| CVE-2021-21300 | LOW3.51 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u4 | 88.5% Actively Exploited | Post-Exploit |
| CVE-2023-25652 | LOW3.51 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 51.9% Actively Exploited | Post-Exploit |
| CVE-2020-36221 | LOW3.51 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 85.0% Actively Exploited | Post-Exploit |
| CVE-2020-36222 | LOW3.51 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 77.2% Actively Exploited | Post-Exploit |
| CVE-2020-36227 | LOW3.51 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 77.2% Actively Exploited | Post-Exploit |
| CVE-2020-36228 | LOW3.51 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 85.0% Actively Exploited | Post-Exploit |
| CVE-2021-27212 | LOW3.51 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u6 | 66.1% Actively Exploited | Post-Exploit |
| CVE-2020-36221 | LOW3.51 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 85.0% Actively Exploited | Post-Exploit |
| CVE-2020-36222 | LOW3.51 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 77.2% Actively Exploited | Post-Exploit |
| CVE-2020-36227 | LOW3.51 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 77.2% Actively Exploited | Post-Exploit |
| CVE-2020-36228 | LOW3.51 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 85.0% Actively Exploited | Post-Exploit |
| CVE-2021-27212 | LOW3.51 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u6 | 66.1% Actively Exploited | Post-Exploit |
| CVE-2023-44487 | LOW3.51 | libnghttp2-14 1.36.0-2+deb10u1 fixed in 1.36.0-2+deb10u2 | 100.0% Actively Exploited | Post-Exploit |
| CVE-2021-23840 | LOW3.51 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u5 | 50.7% Actively Exploited | Post-Exploit |
| CVE-2023-50387 | LOW3.51 | libsystemd0 241-7~deb10u5 No fix yet | 100.0% Actively Exploited | Post-Exploit |
| CVE-2023-50868 | LOW3.51 | libsystemd0 241-7~deb10u5 No fix yet | 74.3% Actively Exploited | Post-Exploit |
| CVE-2023-50387 | LOW3.51 | libudev1 241-7~deb10u5 No fix yet | 100.0% Actively Exploited | Post-Exploit |
| CVE-2023-50868 | LOW3.51 | libudev1 241-7~deb10u5 No fix yet | 74.3% Actively Exploited | Post-Exploit |
| CVE-2021-23840 | LOW3.51 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u5 | 50.7% Actively Exploited | Post-Exploit |
| CVE-2018-25032 | LOW3.51 | zlib1g 1:1.2.11.dfsg-1 fixed in 1:1.2.11.dfsg-1+deb10u1 | 51.7% Actively Exploited | Post-Exploit |
| CVE-2021-3712 | LOW3.46 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u7 | 50.4% Actively Exploited | Post-Exploit |
| CVE-2023-0286 | LOW3.46 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 69.3% Actively Exploited | Post-Exploit |
| CVE-2021-3712 | LOW3.46 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u7 | 50.4% Actively Exploited | Post-Exploit |
| CVE-2023-0286 | LOW3.46 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 69.3% Actively Exploited | Post-Exploit |
| CVE-2022-27774 | LOW3.42 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27774 | LOW3.42 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-27774 | LOW3.42 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2022-1292 | LOW3.41 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u2 | 82.6% Actively Exploited | Post-Exploit |
| CVE-2022-2068 | LOW3.41 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u3 | 96.4% Actively Exploited | Post-Exploit |
| CVE-2022-1292 | LOW3.41 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u2 | 82.6% Actively Exploited | Post-Exploit |
| CVE-2022-2068 | LOW3.41 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u3 | 96.4% Actively Exploited | Post-Exploit |
| CVE-2024-33602 | LOW3.4 | libc-bin 2.28-10 fixed in 2.28-10+deb10u4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-33602 | LOW3.4 | libc6 2.28-10 fixed in 2.28-10+deb10u4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-4741 | LOW3.36 | openssl 1.1.1d-0+deb10u4 No fix yet | 2.9% Low-Moderate Risk | Post-Exploit |
| CVE-2019-13115 | LOW3.35 | libssh2-1 1.8.0-2.1 fixed in 1.8.0-2.1+deb10u1 | 11.7% High Exploitation Risk | Post-Exploit |
| CVE-2023-27538 | LOW3.3 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27538 | LOW3.3 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-27538 | LOW3.3 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u6 | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2024-0727 | LOW3.3 | openssl 1.1.1d-0+deb10u4 No fix yet | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2019-20367 | LOW3.28 | libbsd0 0.9.1-2 fixed in 0.9.1-2+deb10u1 | 2.9% Low-Moderate Risk | Post-Exploit |
| CVE-2021-35942 | LOW3.28 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2021-35942 | LOW3.28 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1586 | LOW3.28 | libpcre2-8-0 10.32-5 fixed in 10.32-5+deb10u1 | 3.4% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1587 | LOW3.28 | libpcre2-8-0 10.32-5 fixed in 10.32-5+deb10u1 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2021-46848 | LOW3.28 | libtasn1-6 4.13-3 fixed in 4.13-3+deb10u1 | 2.8% Low-Moderate Risk | Post-Exploit |
| DLA-3239-2 | LOW3.2 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u6 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2021-22876 | LOW3.18 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22876 | LOW3.18 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22876 | LOW3.18 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 5.3% Low-Moderate Risk | Directly Exposed |
| CVE-2022-2097 | LOW3.18 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 4.9% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0465 | LOW3.18 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0466 | LOW3.18 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2023-3446 | LOW3.18 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u6 | 6.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-3817 | LOW3.18 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u6 | 3.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-5678 | LOW3.18 | openssl 1.1.1d-0+deb10u4 No fix yet | 4.5% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1271 | LOW3.17 | gzip 1.9-3 fixed in 1.9-3+deb10u1 | 5.5% Low-Moderate Risk | Post-Exploit |
| CVE-2021-45960 | LOW3.17 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 4.7% Low-Moderate Risk | Post-Exploit |
| CVE-2022-22825 | LOW3.17 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-22826 | LOW3.17 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 3.0% Low-Moderate Risk | Post-Exploit |
| CVE-2022-22827 | LOW3.17 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 3.0% Low-Moderate Risk | Post-Exploit |
| CVE-2022-42898 | LOW3.17 | libgssapi-krb5-2 1.17-3+deb10u1 fixed in 1.17-3+deb10u5 | 6.9% Low-Moderate Risk | Post-Exploit |
| CVE-2022-42898 | LOW3.17 | libk5crypto3 1.17-3+deb10u1 fixed in 1.17-3+deb10u5 | 6.9% Low-Moderate Risk | Post-Exploit |
| CVE-2022-42898 | LOW3.17 | libkrb5-3 1.17-3+deb10u1 fixed in 1.17-3+deb10u5 | 6.9% Low-Moderate Risk | Post-Exploit |
| CVE-2022-42898 | LOW3.17 | libkrb5support0 1.17-3+deb10u1 fixed in 1.17-3+deb10u5 | 6.9% Low-Moderate Risk | Post-Exploit |
| CVE-2021-39537 | LOW3.17 | libncurses6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-39537 | LOW3.17 | libncursesw6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-39537 | LOW3.17 | libtinfo6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-39537 | LOW3.17 | ncurses-base 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-39537 | LOW3.17 | ncurses-bin 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2021-36222 | LOW3.1 | libgssapi-krb5-2 1.17-3+deb10u1 fixed in 1.17-3+deb10u2 | 10.5% High Exploitation Risk | Post-Exploit |
| CVE-2021-36222 | LOW3.1 | libk5crypto3 1.17-3+deb10u1 fixed in 1.17-3+deb10u2 | 10.5% High Exploitation Risk | Post-Exploit |
| CVE-2021-36222 | LOW3.1 | libkrb5-3 1.17-3+deb10u1 fixed in 1.17-3+deb10u2 | 10.5% High Exploitation Risk | Post-Exploit |
| CVE-2021-36222 | LOW3.1 | libkrb5support0 1.17-3+deb10u1 fixed in 1.17-3+deb10u2 | 10.5% High Exploitation Risk | Post-Exploit |
| CVE-2020-36230 | LOW3.1 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 12.1% High Exploitation Risk | Post-Exploit |
| CVE-2020-36230 | LOW3.1 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 12.1% High Exploitation Risk | Post-Exploit |
| CVE-2022-4450 | LOW3.1 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 28.6% High Exploitation Risk | Post-Exploit |
| CVE-2022-4450 | LOW3.1 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 28.6% High Exploitation Risk | Post-Exploit |
| CVE-2023-2650 | LOW3.04 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 75.4% Actively Exploited | Post-Exploit |
| CVE-2023-2650 | LOW3.04 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u5 | 75.4% Actively Exploited | Post-Exploit |
| CVE-2022-40674 | LOW2.92 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u5 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2019-17498 | LOW2.92 | libssh2-1 1.8.0-2.1 fixed in 1.8.0-2.1+deb10u1 | 3.8% Low-Moderate Risk | Post-Exploit |
| CVE-2023-31484 | LOW2.92 | perl 5.28.1-6+deb10u1 No fix yet | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2024-2511 | LOW2.89 | openssl 1.1.1d-0+deb10u4 No fix yet | 52.4% Actively Exploited | Post-Exploit |
| CVE-2022-1304 | LOW2.81 | e2fsprogs 1.44.5-1+deb10u3 No fix yet | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2022-48624 | LOW2.81 | less 487-0.1+b1 fixed in 487-0.1+deb10u1 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1304 | LOW2.81 | libcom-err2 1.44.5-1+deb10u3 No fix yet | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2021-46143 | LOW2.81 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 4.2% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1304 | LOW2.81 | libext2fs2 1.44.5-1+deb10u3 No fix yet | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2022-1304 | LOW2.81 | libss2 1.44.5-1+deb10u3 No fix yet | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2021-37600 | LOW2.8 | bsdutils 1:2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2021-37600 | LOW2.8 | fdisk 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2024-22365 | LOW2.8 | libpam-modules 1.3.1-5 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2024-22365 | LOW2.8 | libpam-modules-bin 1.3.1-5 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2024-22365 | LOW2.8 | libpam-runtime 1.3.1-5 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2024-22365 | LOW2.8 | libpam0g 1.3.1-5 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2023-4641 | LOW2.8 | login 1:4.5-1.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2021-37600 | LOW2.8 | mount 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2023-4641 | LOW2.8 | passwd 1:4.5-1.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2021-37600 | LOW2.8 | util-linux 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2019-19126 | LOW2.8 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2019-19126 | LOW2.8 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2023-4016 | LOW2.8 | libprocps7 2:3.3.15-2 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2021-36084 | LOW2.8 | libsepol1 2.8-1 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2021-36085 | LOW2.8 | libsepol1 2.8-1 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2021-36086 | LOW2.8 | libsepol1 2.8-1 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2021-36087 | LOW2.8 | libsepol1 2.8-1 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2020-8908 | LOW2.8 | com.google.guava:guava 25.1-android fixed in 32.0.0-android | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2021-3449 | LOW2.76 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u6 | 63.5% Actively Exploited | Post-Exploit |
| CVE-2021-3449 | LOW2.76 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1d-0+deb10u6 | 63.5% Actively Exploited | Post-Exploit |
| CVE-2022-23990 | LOW2.7 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u2 | 4.7% Low-Moderate Risk | Post-Exploit |
| CVE-2022-25314 | LOW2.7 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u3 | 4.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-43680 | LOW2.7 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u6 | 3.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-52425 | LOW2.7 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u7 | 2.1% Low-Moderate Risk | Post-Exploit |
| CVE-2022-27405 | LOW2.7 | libfreetype6 2.9.1-3+deb10u2 fixed in 2.9.1-3+deb10u3 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-27406 | LOW2.7 | libfreetype6 2.9.1-3+deb10u2 fixed in 2.9.1-3+deb10u3 | 3.3% Low-Moderate Risk | Post-Exploit |
| CVE-2020-24659 | LOW2.7 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u7 | 3.8% Low-Moderate Risk | Post-Exploit |
| CVE-2022-2509 | LOW2.7 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u9 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2024-0553 | LOW2.7 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u12 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36223 | LOW2.7 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.2% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36224 | LOW2.7 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.4% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36225 | LOW2.7 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.4% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36226 | LOW2.7 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.2% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36229 | LOW2.7 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.4% Low-Moderate Risk | Post-Exploit |
| CVE-2023-2953 | LOW2.7 | libldap-2.4-2 2.4.47+dfsg-3+deb10u4 No fix yet | 2.0% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36223 | LOW2.7 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.2% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36224 | LOW2.7 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.4% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36225 | LOW2.7 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.4% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36226 | LOW2.7 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.2% Low-Moderate Risk | Post-Exploit |
| CVE-2020-36229 | LOW2.7 | libldap-common 2.4.47+dfsg-3+deb10u4 fixed in 2.4.47+dfsg-3+deb10u5 | 4.4% Low-Moderate Risk | Post-Exploit |
| CVE-2023-2953 | LOW2.7 | libldap-common 2.4.47+dfsg-3+deb10u4 No fix yet | 2.0% Low-Moderate Risk | Post-Exploit |
| CVE-2020-11080 | LOW2.7 | libnghttp2-14 1.36.0-2+deb10u1 fixed in 1.36.0-2+deb10u2 | 5.3% Low-Moderate Risk | Post-Exploit |
| CVE-2019-20454 | LOW2.7 | libpcre2-8-0 10.32-5 fixed in 10.32-5+deb10u1 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2020-22218 | LOW2.7 | libssh2-1 1.8.0-2.1 fixed in 1.8.0-2.1+deb10u1 | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0215 | LOW2.7 | libssl1.1 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 5.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-3138 | LOW2.7 | libx11-6 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u3 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-3138 | LOW2.7 | libx11-data 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u3 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0215 | LOW2.7 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 5.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-0361 | LOW2.66 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u10 | 1.5% Low-Moderate Risk | Post-Exploit |
| CVE-2024-28085 | LOW2.64 | bsdutils 1:2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2024-28085 | LOW2.64 | fdisk 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2024-28085 | LOW2.64 | mount 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2024-28085 | LOW2.64 | util-linux 2.33.1-0.1 fixed in 2.33.1-0.1+deb10u1 | 2.2% Low-Moderate Risk | Post-Exploit |
| CVE-2024-32487 | LOW2.63 | less 487-0.1+b1 fixed in 487-0.1+deb10u1 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2022-29458 | LOW2.56 | libncurses6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u3 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-29458 | LOW2.56 | libncursesw6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u3 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-29458 | LOW2.56 | libtinfo6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u3 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-29458 | LOW2.56 | ncurses-base 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u3 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2022-29458 | LOW2.56 | ncurses-bin 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u3 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2024-28182 | LOW2.48 | libnghttp2-14 1.36.0-2+deb10u1 fixed in 1.36.0-2+deb10u3 | 85.0% Actively Exploited | Post-Exploit |
| CVE-2022-4304 | LOW2.44 | openssl 1.1.1d-0+deb10u4 fixed in 1.1.1n-0+deb10u4 | 23.5% High Exploitation Risk | Post-Exploit |
| CVE-2023-29491 | LOW2.39 | libncurses6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2023-29491 | LOW2.39 | libncursesw6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2023-29491 | LOW2.39 | libtinfo6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2023-43787 | LOW2.39 | libx11-6 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2023-43787 | LOW2.39 | libx11-data 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2023-29491 | LOW2.39 | ncurses-base 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2023-29491 | LOW2.39 | ncurses-bin 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u5 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2022-25313 | LOW2.34 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u3 | 3.3% Low-Moderate Risk | Post-Exploit |
| CVE-2021-4209 | LOW2.34 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u9 | 1.9% Low-Moderate Risk | Post-Exploit |
| CVE-2021-37750 | LOW2.34 | libgssapi-krb5-2 1.17-3+deb10u1 fixed in 1.17-3+deb10u3 | 2.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-36054 | LOW2.34 | libgssapi-krb5-2 1.17-3+deb10u1 fixed in 1.17-3+deb10u6 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2021-37750 | LOW2.34 | libk5crypto3 1.17-3+deb10u1 fixed in 1.17-3+deb10u3 | 2.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-36054 | LOW2.34 | libk5crypto3 1.17-3+deb10u1 fixed in 1.17-3+deb10u6 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2021-37750 | LOW2.34 | libkrb5-3 1.17-3+deb10u1 fixed in 1.17-3+deb10u3 | 2.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-36054 | LOW2.34 | libkrb5-3 1.17-3+deb10u1 fixed in 1.17-3+deb10u6 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2021-37750 | LOW2.34 | libkrb5support0 1.17-3+deb10u1 fixed in 1.17-3+deb10u3 | 2.5% Low-Moderate Risk | Post-Exploit |
| CVE-2023-36054 | LOW2.34 | libkrb5support0 1.17-3+deb10u1 fixed in 1.17-3+deb10u6 | 2.8% Low-Moderate Risk | Post-Exploit |
| CVE-2020-19189 | LOW2.34 | libncurses6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u4 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | libncurses6 6.1+20181013-2+deb10u2 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2020-19189 | LOW2.34 | libncursesw6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u4 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | libncursesw6 6.1+20181013-2+deb10u2 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2020-19189 | LOW2.34 | libtinfo6 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u4 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | libtinfo6 6.1+20181013-2+deb10u2 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2020-19189 | LOW2.34 | ncurses-base 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u4 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | ncurses-base 6.1+20181013-2+deb10u2 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2020-19189 | LOW2.34 | ncurses-bin 6.1+20181013-2+deb10u2 fixed in 6.1+20181013-2+deb10u4 | 2.3% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | ncurses-bin 6.1+20181013-2+deb10u2 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2019-14855 | LOW2.34 | gpgv 2.2.12-1+deb10u1 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2018-7169 | LOW2.34 | login 1:4.5-1.1 No fix yet | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2018-7169 | LOW2.34 | passwd 1:4.5-1.1 No fix yet | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2020-8284 | LOW2.22 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22890 | LOW2.22 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.1% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22924 | LOW2.22 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 6.3% Low-Moderate Risk | Directly Exposed |
| CVE-2022-35252 | LOW2.22 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 3.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-28322 | LOW2.22 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u8 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-38546 | LOW2.22 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u7 | 6.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8284 | LOW2.22 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22890 | LOW2.22 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.1% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22924 | LOW2.22 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 6.3% Low-Moderate Risk | Directly Exposed |
| CVE-2022-35252 | LOW2.22 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 3.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-28322 | LOW2.22 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u8 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-38546 | LOW2.22 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u7 | 6.0% Low-Moderate Risk | Directly Exposed |
| CVE-2020-8284 | LOW2.22 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.9% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22890 | LOW2.22 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u2 | 3.1% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22924 | LOW2.22 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 6.3% Low-Moderate Risk | Directly Exposed |
| CVE-2022-35252 | LOW2.22 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u4 | 3.8% Low-Moderate Risk | Directly Exposed |
| CVE-2023-28322 | LOW2.22 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u8 | 2.2% Low-Moderate Risk | Directly Exposed |
| CVE-2023-38546 | LOW2.22 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u7 | 6.0% Low-Moderate Risk | Directly Exposed |
| CVE-2023-5981 | LOW2.12 | libgnutls30 3.6.7-4+deb10u5 fixed in 3.6.7-4+deb10u11 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2021-27645 | LOW2.12 | libc-bin 2.28-10 fixed in 2.28-10+deb10u2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2021-27645 | LOW2.12 | libc6 2.28-10 fixed in 2.28-10+deb10u2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2016-2781 | LOW1.99 | coreutils 8.30-3 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2021-22898 | LOW1.86 | curl 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22898 | LOW1.86 | libcurl3-gnutls 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2021-22898 | LOW1.86 | libcurl4 7.64.0-4+deb10u1 fixed in 7.64.0-4+deb10u3 | 4.5% Low-Moderate Risk | Directly Exposed |
| CVE-2023-43785 | LOW1.68 | libx11-6 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u4 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2023-43786 | LOW1.68 | libx11-6 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2023-43785 | LOW1.68 | libx11-data 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u4 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2023-43786 | LOW1.68 | libx11-data 2:1.6.7-1+deb10u1 fixed in 2:1.6.7-1+deb10u4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2023-29383 | LOW1.68 | login 1:4.5-1.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2023-29383 | LOW1.68 | passwd 1:4.5-1.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2023-4016 | LOW1.68 | procps 2:3.3.15-2 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2023-39804 | LOW1.68 | tar 1.30+dfsg-6 fixed in 1.30+dfsg-6+deb10u1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2019-17543 | LOW1.61 | liblz4-1 1.8.3-1 No fix yet | 10.5% High Exploitation Risk | Post-Exploit |
| CVE-2023-25815 | LOW1.5 | git 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| DSA-5085-2 | LOW1.44 | libexpat1 2.2.6-2+deb10u1 fixed in 2.2.6-2+deb10u4 | — | Post-Exploit |
| CVE-2022-23521 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u7 | 56.3% Actively Exploited | Not Applicable |
| CVE-2022-41903 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u7 | 44.3% High Exploitation Risk | Not Applicable |
| CVE-2024-32002 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 29.2% High Exploitation Risk | Not Applicable |
| CVE-2019-1387 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 4.4% Low-Moderate Risk | Not Applicable |
| CVE-2022-39260 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 4.0% Low-Moderate Risk | Not Applicable |
| CVE-2022-42898 | NONE0 | krb5-locales 1.17-3+deb10u1 fixed in 1.17-3+deb10u5 | 6.9% Low-Moderate Risk | Not Applicable |
| CVE-2022-24765 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2022-29187 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-29007 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 5.6% Low-Moderate Risk | Not Applicable |
| CVE-2024-32004 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2024-32465 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2021-21300 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u4 | 88.5% Actively Exploited | Not Applicable |
| CVE-2021-40330 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u4 | 2.9% Low-Moderate Risk | Not Applicable |
| CVE-2023-23946 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u8 | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2023-25652 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 51.9% Actively Exploited | Not Applicable |
| CVE-2021-36222 | NONE0 | krb5-locales 1.17-3+deb10u1 fixed in 1.17-3+deb10u2 | 10.5% High Exploitation Risk | Not Applicable |
| CVE-2024-32021 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2021-37750 | NONE0 | krb5-locales 1.17-3+deb10u1 fixed in 1.17-3+deb10u3 | 2.5% Low-Moderate Risk | Not Applicable |
| CVE-2023-36054 | NONE0 | krb5-locales 1.17-3+deb10u1 fixed in 1.17-3+deb10u6 | 2.8% Low-Moderate Risk | Not Applicable |
| CVE-2022-39253 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u5 | 1.5% Low-Moderate Risk | Not Applicable |
| CVE-2023-22490 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u8 | 0.7% Theoretical Threat | Not Applicable |
| DLA-3482-1 | NONE0 | debian-archive-keyring 2019.1 fixed in 2019.1+deb10u2 | — | Not Applicable |
| DLA-3239-2 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u6 | — | Not Applicable |
| DLA-3134-1 | NONE0 | tzdata 2020e-0+deb10u1 fixed in 2021a-0+deb10u7 | — | Not Applicable |
| DLA-3161-1 | NONE0 | tzdata 2020e-0+deb10u1 fixed in 2021a-0+deb10u8 | — | Not Applicable |
| DLA-3366-1 | NONE0 | tzdata 2020e-0+deb10u1 fixed in 2021a-0+deb10u10 | — | Not Applicable |
| DLA-3412-1 | NONE0 | tzdata 2020e-0+deb10u1 fixed in 2021a-0+deb10u11 | — | Not Applicable |
| DLA-3684-1 | NONE0 | tzdata 2020e-0+deb10u1 fixed in 2021a-0+deb10u12 | — | Not Applicable |
| DLA-3788-1 | NONE0 | tzdata 2020e-0+deb10u1 fixed in 2024a-0+deb10u1 | — | Not Applicable |
| CVE-2023-25815 | NONE0 | git-man 1:2.20.1-2+deb10u3 fixed in 1:2.20.1-2+deb10u9 | 0.8% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.