🟢 Low ⏱ 5–15 min Last verified: 5 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29599 Upstream summary: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0536 Upstream summary: Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7032 Upstream summary: webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to […]
🟠 High ⏱ 15–60 min Last verified: 5 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2018-20721 CVE-2021-46141 CVE-2021-46142 CVE-2024-34402 CVE-2024-34403 +4 more Upstream summary: An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* […]
🟡 Medium ⏱ 10–30 min Last verified: 5 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0826 CVE-2005-0814 CVE-2006-0353 Upstream summary: lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, […]
🟠 High ⏱ 15–60 min Last verified: 5 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4651 CVE-2014-9637 CVE-2015-1196 CVE-2015-1395 CVE-2015-1396 CVE-2015-1416 CVE-2016-10713 CVE-2018-1000156 +6 more Upstream summary: Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 4 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0358 CVE-2003-0359 CVE-2019-19905 CVE-2020-5209 CVE-2020-5210 CVE-2020-5211 CVE-2020-5212 CVE-2020-5213 +4 more Upstream summary: Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is […]
🟢 Low ⏱ 5–15 min Last verified: 3 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-33452 Upstream summary: An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 3 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1165 CVE-2006-2878 CVE-2006-2945 CVE-2006-4674 CVE-2006-4675 CVE-2006-4679 CVE-2006-5098 CVE-2006-5099 +12 more Upstream summary: Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 3 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5925 CVE-2008-3329 CVE-2012-6709 CVE-2013-6050 CVE-2017-11114 Upstream summary: Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in […]
