🟢 Low ⏱ 5–15 min Last verified: 10 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-22513 Upstream summary: djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due […]
🟠 High ⏱ 15–60 min Last verified: 10 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5209 CVE-2017-5545 CVE-2017-5834 CVE-2017-5835 CVE-2017-5836 CVE-2017-6435 CVE-2017-6436 CVE-2017-6437 +4 more Upstream summary: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15691 Upstream summary: In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1300 CVE-2009-1358 CVE-2011-1829 CVE-2011-3374 CVE-2011-3634 CVE-2012-0214 CVE-2012-0954 CVE-2012-0961 +12 more Upstream summary: apt 0.7.20 does not check when the date command returns an "invalid date" error, which can […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5052 CVE-2009-5053 CVE-2009-5054 CVE-2010-4722 CVE-2010-4723 CVE-2010-4724 CVE-2010-4725 CVE-2010-4726 +12 more Upstream summary: Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors. Table […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-7650 CVE-2017-7651 CVE-2017-7652 CVE-2017-7653 CVE-2017-7654 CVE-2017-7655 CVE-2017-9868 CVE-2018-12546 +12 more Upstream summary: In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2097 CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 +12 more Upstream summary: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1086 CVE-2011-3581 CVE-2014-3209 CVE-2017-1000231 CVE-2017-1000232 CVE-2020-19860 CVE-2020-19861 Upstream summary: Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17455 Upstream summary: Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13611 Upstream summary: An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a […]
