🟢 Low ⏱ 5–15 min Last verified: 1 June 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-50658 CVE-2025-63811 Upstream summary: The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-10224 Upstream summary: Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-44905 Upstream summary: go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6640 CVE-2014-4945 CVE-2014-4946 CVE-2025-30349 Upstream summary: Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows […]
🟢 Low ⏱ 5–15 min Last verified: 28 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-46807 CVE-2025-52936 Upstream summary: A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate […]
🟠 High ⏱ 15–60 min Last verified: 27 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10696 CVE-2021-3602 CVE-2022-27651 CVE-2022-2990 CVE-2022-4122 CVE-2022-4123 CVE-2024-11218 CVE-2024-1753 +2 more Upstream summary: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0855 CVE-2007-3726 CVE-2014-9983 CVE-2022-30333 CVE-2023-40477 CVE-2024-33899 Upstream summary: Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-9375 Upstream summary: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2312 CVE-2018-6790 CVE-2018-6791 CVE-2024-36041 Upstream summary: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when […]
