🟢 Low ⏱ 5–15 min Last verified: 8 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26144 Upstream summary: Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1193 CVE-2015-1194 Upstream summary: Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1932 CVE-2011-4675 Upstream summary: Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname […]
🟡 Medium ⏱ 10–30 min Last verified: 8 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6060 CVE-2014-7912 CVE-2014-7913 CVE-2016-1503 CVE-2016-1504 CVE-2019-11577 CVE-2019-11578 CVE-2019-11579 +1 more Upstream summary: The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 8 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1845 CVE-2014-1846 CVE-2022-37706 Upstream summary: An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment. […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7404 Upstream summary: OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-9858 CVE-2020-8866 Upstream summary: Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20340 CVE-2019-9578 Upstream summary: Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-0842 Upstream summary: xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-2652 Upstream summary: Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility […]
