🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5052 CVE-2009-5053 CVE-2009-5054 CVE-2010-4722 CVE-2010-4723 CVE-2010-4724 CVE-2010-4725 CVE-2010-4726 +12 more Upstream summary: Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors. Table […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-7650 CVE-2017-7651 CVE-2017-7652 CVE-2017-7653 CVE-2017-7654 CVE-2017-7655 CVE-2017-9868 CVE-2018-12546 +12 more Upstream summary: In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-033 Related CVEs: CVE-2021-43618 Upstream summary: A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-450 Related CVEs: CVE-2023-4641 Upstream summary: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2097 CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 +12 more Upstream summary: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1086 CVE-2011-3581 CVE-2014-3209 CVE-2017-1000231 CVE-2017-1000232 CVE-2020-19860 CVE-2020-19861 Upstream summary: Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17455 Upstream summary: Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14528-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-52804 Upstream summary: Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13611 Upstream summary: An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5188 CVE-2017-9268 CVE-2018-12466 CVE-2018-12467 CVE-2018-12479 CVE-2018-7688 CVE-2018-7689 CVE-2020-8020 +2 more Upstream summary: The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
