🟡 Medium ⏱ 10–30 min Last verified: 24 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28617 CVE-2024-30202 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 CVE-2024-39331 Upstream summary: org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file […]
🟢 Low ⏱ 5–15 min Last verified: 24 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29376 Upstream summary: ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconnecting the victim from an IRC server) via […]
🟢 Low ⏱ 5–15 min Last verified: 24 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35904 Upstream summary: An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation and how […]
🟢 Low ⏱ 5–15 min Last verified: 24 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-9246 Upstream summary: The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command […]
🟠 High ⏱ 15–60 min Last verified: 24 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0852 CVE-2015-3885 CVE-2016-5684 CVE-2019-12211 CVE-2019-12212 CVE-2019-12213 CVE-2019-12214 CVE-2020-21426 +12 more Upstream summary: Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 23 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0484 CVE-2014-1419 Upstream summary: The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment." Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 23 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5986 CVE-2012-0270 CVE-2012-2106 CVE-2012-2107 CVE-2012-2108 Upstream summary: Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in […]
🟡 Medium ⏱ 10–30 min Last verified: 23 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8789 CVE-2015-8790 CVE-2015-8791 CVE-2019-13615 CVE-2021-3405 CVE-2023-52339 Upstream summary: Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply […]
🟠 High ⏱ 15–60 min Last verified: 23 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5009 CVE-2010-3901 CVE-2010-3902 CVE-2010-3903 CVE-2012-3291 CVE-2012-6128 CVE-2013-7098 CVE-2019-16239 +2 more Upstream summary: Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause […]
🟠 High ⏱ 15–60 min Last verified: 23 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7437 CVE-2016-8685 CVE-2016-8686 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 +7 more Upstream summary: Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) […]
