🟠 High ⏱ 15–60 min Last verified: 29 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0193 CVE-2017-11110 CVE-2018-20451 CVE-2018-20453 CVE-2019-7156 CVE-2019-7233 CVE-2023-31979 CVE-2023-41633 +4 more Upstream summary: msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-11723 CVE-2018-20348 CVE-2020-18897 Upstream summary: The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0422 Upstream summary: flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17531 CVE-2024-38448 Upstream summary: gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15138 CVE-2021-23341 CVE-2021-3801 CVE-2022-23647 CVE-2024-53382 Upstream summary: Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 2.25-r0 📖 ~4 min read • Source: Alpine secdb entry — alpine 2.25-r0 Related CVEs: CVE-2021-38370 CVE-2020-14929 Upstream summary: Alpine community repository for vv3.20 ships alpine 2.25-r0 which addresses CVE-2021-38370. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 29 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5188 CVE-2009-1296 CVE-2011-1831 CVE-2011-1832 CVE-2011-1833 CVE-2011-1834 CVE-2011-1835 CVE-2011-1836 +6 more Upstream summary: The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36241 CVE-2021-28650 Upstream summary: autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.1.1-r0 📖 ~4 min read • Source: Alpine secdb entry — pam-u2f 1.1.1-r0 Related CVEs: CVE-2021-31924 Upstream summary: Alpine community repository for vv3.19 ships pam-u2f 1.1.1-r0 which addresses CVE-2021-31924. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7316-1 Related CVEs: CVE-2020-25713 CVE-2024-57822 CVE-2024-57823 Upstream summary: It was discovered that Raptor incorrectly handled memory operations when processing certain input files. A remote attacker could possibly use this issue […]
