🟢 Low ⏱ 5–15 min Last verified: 31 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-13939 Upstream summary: String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-4067 Upstream summary: The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-44905 Upstream summary: go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-5191 CVE-2018-17960 CVE-2021-33829 CVE-2021-41165 CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 Upstream summary: Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6640 CVE-2014-4945 CVE-2014-4946 CVE-2025-30349 Upstream summary: Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-47764 Upstream summary: cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, […]
🟢 Low ⏱ 5–15 min Last verified: 28 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-46807 CVE-2025-52936 Upstream summary: A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate […]
🟠 High ⏱ 15–60 min Last verified: 27 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10696 CVE-2021-3602 CVE-2022-27651 CVE-2022-2990 CVE-2022-4122 CVE-2022-4123 CVE-2024-11218 CVE-2024-1753 +2 more Upstream summary: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 26 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-8331 CVE-2024-6485 CVE-2025-1647 Upstream summary: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different […]
