🟢 Low ⏱ 5–15 min Last verified: 17 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0949 Upstream summary: xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17076 Upstream summary: GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-3719 CVE-2019-10746 Upstream summary: mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15007 Upstream summary: A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of […]
🟠 High ⏱ 15–60 min Last verified: 16 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1391 CVE-2002-1392 CVE-2003-0516 CVE-2003-0517 CVE-2008-4936 CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 +4 more Upstream summary: Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0386 CVE-2004-0433 CVE-2004-1309 CVE-2004-1310 CVE-2004-1311 CVE-2006-4800 CVE-2006-6172 CVE-2007-1246 +12 more Upstream summary: Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2000-0992 CVE-2001-1459 CVE-2001-1507 CVE-2002-0639 CVE-2002-0640 CVE-2002-0765 CVE-2003-0190 CVE-2003-0386 +12 more Upstream summary: Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5086 CVE-2009-0036 CVE-2010-2237 CVE-2010-2238 CVE-2010-2239 CVE-2010-2242 CVE-2011-1146 CVE-2011-1486 +12 more Upstream summary: Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1875 Upstream summary: The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file. Table of […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-41401 CVE-2023-37476 CVE-2023-41886 CVE-2023-41887 CVE-2024-23833 CVE-2024-47878 CVE-2024-47879 CVE-2024-47880 +3 more Upstream summary: OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit […]
