🟢 Low ⏱ 5–15 min Last verified: 10 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1032 Upstream summary: Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9474 Upstream summary: Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 6.5.0-r1 📖 ~4 min read • Source: Alpine secdb entry — qt6-qtsvg 6.5.0-r1 Related CVEs: CVE-2023-32573 Upstream summary: Alpine community repository for vedge ships qt6-qtsvg 6.5.0-r1 which addresses CVE-2023-32573. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 10 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-0876 CVE-2012-1148 CVE-2012-6702 CVE-2013-0340 CVE-2015-1283 CVE-2016-0718 +12 more Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-25211 Upstream summary: parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000872 Upstream summary: OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result […]
Introduction This guide explains how to Configure Grafana Alerting on Debian 12 on Debian 12 Bookworm. Debian Bookworm uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 12 install with the standard […]
🟠 High ⏱ 5–30 min Last verified: 10 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 10 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2691 CVE-2006-2692 CVE-2009-1440 Upstream summary: Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.4.3-r0 📖 ~4 min read • Source: Alpine secdb entry — cryptsetup 2.4.3-r0 Related CVEs: CVE-2021-4122 CVE-2020-14382 Upstream summary: Alpine main repository for vv3.18 ships cryptsetup 2.4.3-r0 which addresses CVE-2021-4122. Table of contents Symptom & Impact […]
