🟢 Low ⏱ 5–15 min Last verified: 26 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-36069 Upstream summary: Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a registry, Poetry uses various commands, such […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-32278 Upstream summary: XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 26 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0402 CVE-2007-3905 CVE-2008-3258 CVE-2008-6837 CVE-2008-6838 CVE-2009-2343 CVE-2014-9235 CVE-2014-9236 Upstream summary: SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 26 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0404 CVE-2007-0405 CVE-2007-5712 CVE-2007-5828 CVE-2008-2302 CVE-2008-3909 CVE-2009-2659 CVE-2009-3695 +12 more Upstream summary: bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2785 Upstream summary: The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary code via […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-1183 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-24056 Upstream summary: In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3070 CVE-2012-6071 Upstream summary: Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26759 Upstream summary: clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, […]
🟢 Low ⏱ 5–15 min Last verified: 25 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-1020014 Upstream summary: docker-credential-helpers before 0.6.3 has a double free in the List functions. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
