🟢 Low ⏱ 5–15 min Last verified: 18 July 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-30187 Upstream summary: Anope before 2.0.15 does not prevent resetting the password of a suspended account. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 18 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10516 CVE-2019-14806 CVE-2020-28724 CVE-2023-23934 CVE-2023-25577 CVE-2024-34069 Upstream summary: Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8315 CVE-2024-21633 Upstream summary: Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit […]
🟡 Medium ⏱ 10–30 min Last verified: 17 July 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-6758 CVE-2018-7490 CVE-2020-11984 CVE-2021-36160 CVE-2024-24795 Upstream summary: The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0844 CVE-2014-3566 CVE-2015-7505 CVE-2015-7506 CVE-2015-7507 CVE-2015-7508 CVE-2024-51317 CVE-2025-29699 +1 more Upstream summary: Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 15 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4802 CVE-2010-4803 CVE-2011-1589 CVE-2011-1841 CVE-2018-25100 CVE-2020-36829 CVE-2021-47208 CVE-2024-58134 +1 more Upstream summary: Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7038 CVE-2013-7039 CVE-2021-3466 CVE-2023-27371 CVE-2025-59777 CVE-2025-62689 Upstream summary: The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-46823 CVE-2025-61911 CVE-2025-61912 Upstream summary: python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-35036 Upstream summary: Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 CVE-2012-3421 CVE-2012-5530 CVE-2023-6917 CVE-2024-3019 CVE-2024-45770 Upstream summary: libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly […]
