🟠 High ⏱ 15–60 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-27985 CVE-2023-27986 CVE-2023-28617 CVE-2024-30202 +7 more Upstream summary: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5379 CVE-2012-0946 CVE-2012-0951 CVE-2012-0952 CVE-2012-0953 CVE-2012-4225 CVE-2013-0131 CVE-2013-5986 +12 more Upstream summary: The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-36039 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-29465 Upstream summary: SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3807 Upstream summary: ansi-regex is vulnerable to Inefficient Regular Expression Complexity Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17572 CVE-2019-20933 CVE-2022-36640 Upstream summary: InfluxDB 0.9.5 has Reflected XSS in the Write Data module. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17400 Upstream summary: The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2008 CVE-2009-0751 CVE-2009-4495 CVE-2011-4350 CVE-2011-5025 CVE-2016-1000108 CVE-2017-10974 CVE-2020-24379 +1 more Upstream summary: Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-12224 Upstream summary: Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3146 CVE-2005-3147 CVE-2005-3148 CVE-2020-7040 Upstream summary: StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. Table of […]
