🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-40577 Upstream summary: Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-39264 Upstream summary: nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets, which could lead to man-in-the-middle […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2085 CVE-2012-2086 CVE-2012-2093 CVE-2012-5524 CVE-2015-8688 CVE-2016-10376 CVE-2022-39835 Upstream summary: The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2214 Upstream summary: apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 6.6.13-r1 📖 ~4 min read • Source: Alpine secdb entry — linux-lts 6.6.13-r1 Related CVEs: CVE-46838 CVE-2023-32233 CVE-2022-41674 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2020-29568 +1 more Upstream summary: Alpine main repository for vedge ships linux-lts 6.6.13-r1 which […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000998 Upstream summary: FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact–CVSweb is anonymous & read-only. It […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-32325 CVE-2023-27781 Upstream summary: JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-43380 Upstream summary: fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6799-1 Related CVEs: CVE-2024-34069 CVE-2023-23934 CVE-2023-25577 CVE-2019-14806 CVE-2020-28724 CVE-2016-10516 Upstream summary: It was discovered that the debugger in Werkzeug was not restricted to trusted hosts. A remote attacker could possibly […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6643-1 Related CVEs: CVE-2023-42282 Upstream summary: Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to […]
