🟡 Medium ⏱ 10–30 min Last verified: 18 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000487 CVE-2022-4244 CVE-2022-4245 CVE-2025-67030 Upstream summary: Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 18 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3121 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 CVE-2025-2176 CVE-2025-2177 Upstream summary: Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) before 0.2.25 allows […]
🟢 Low ⏱ 5–15 min Last verified: 18 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-8556 Upstream summary: A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection […]
🟡 Medium ⏱ 10–30 min Last verified: 17 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2761 CVE-2010-4410 CVE-2010-4411 CVE-2025-40927 Upstream summary: The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29482 CVE-2025-58058 Upstream summary: xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz […]
🟡 Medium ⏱ 10–30 min Last verified: 13 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11014 CVE-2025-11015 CVE-2025-11017 Upstream summary: A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to […]
🟠 High ⏱ 15–60 min Last verified: 10 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2015-8396 CVE-2015-8397 CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVE-2025-11266 +5 more Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module […]
🟠 High ⏱ 15–60 min Last verified: 9 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-47015 CVE-2023-22084 CVE-2023-52969 CVE-2023-52970 CVE-2023-52971 CVE-2024-21096 CVE-2025-13699 CVE-2025-21490 +3 more Upstream summary: MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for […]
🟠 High ⏱ 15–60 min Last verified: 5 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2027 CVE-2016-4000 CVE-2017-17522 CVE-2019-16935 CVE-2025-12084 CVE-2025-15366 CVE-2025-15367 CVE-2025-6069 +3 more Upstream summary: Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which […]
