🟢 Low ⏱ 5–15 min Last verified: 21 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8640 Upstream summary: A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1384 CVE-2007-1385 CVE-2007-1799 CVE-2008-5905 CVE-2008-5906 Upstream summary: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a […]
🟢 Low ⏱ 5–15 min Last verified: 20 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23362 Upstream summary: The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The […]
🟡 Medium ⏱ 10–30 min Last verified: 20 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1335 CVE-2007-3920 CVE-2007-6389 CVE-2008-0887 CVE-2009-4641 CVE-2009-4642 CVE-2010-0285 CVE-2010-0414 +1 more Upstream summary: gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2704 Upstream summary: realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8861 CVE-2015-8862 Upstream summary: The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-3008 Upstream summary: The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24884 Upstream summary: ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3896 CVE-2023-4949 Upstream summary: Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35678 Upstream summary: Autobahn|Python before 20.12.3 allows redirect header injection. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
