🟡 Medium ⏱ 10–30 min Last verified: 18 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-22332 CVE-2024-45624 CVE-2025-46801 Upstream summary: Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to […]
🟢 Low ⏱ 5–15 min Last verified: 17 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-45333 Upstream summary: berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing […]
🟢 Low ⏱ 5–15 min Last verified: 17 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-12183 CVE-2025-66566 Upstream summary: Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input. […]
🟢 Low ⏱ 5–15 min Last verified: 17 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45139 CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 16 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1484 CVE-2010-2799 CVE-2012-0219 CVE-2013-3571 CVE-2014-0019 CVE-2015-1379 CVE-2016-2217 CVE-2024-54661 Upstream summary: Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1382 CVE-2009-2459 CVE-2024-40446 Upstream summary: Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file […]
🟡 Medium ⏱ 10–30 min Last verified: 14 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2014-0350 CVE-2017-1000472 CVE-2023-52389 CVE-2025-45766 CVE-2025-6375 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows […]
🟢 Low ⏱ 5–15 min Last verified: 14 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69209 Upstream summary: ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.7 allows an attacker to […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2078 CVE-2019-10648 CVE-2025-14306 CVE-2025-14307 CVE-2025-14308 Upstream summary: Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the […]
