🟡 Medium ⏱ 10–30 min Last verified: 7 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5185 CVE-2008-5186 CVE-2012-3521 CVE-2025-2123 Upstream summary: The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3300 CVE-2009-3474 CVE-2009-3475 CVE-2009-3476 CVE-2019-19191 CVE-2021-28963 CVE-2021-31826 CVE-2025-9943 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-29366 CVE-2025-9688 Upstream summary: In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary commands on the host machine. […]
🟡 Medium ⏱ 10–30 min Last verified: 5 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40983 CVE-2022-43591 CVE-2025-12385 Upstream summary: An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-6095 CVE-2024-44331 Upstream summary: An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0855 CVE-2007-3726 CVE-2014-9983 CVE-2022-30333 CVE-2023-40477 CVE-2024-33899 Upstream summary: Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31981 CVE-2023-31982 CVE-2023-36192 CVE-2024-3119 CVE-2024-3120 CVE-2024-35434 Upstream summary: Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 1 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33192 CVE-2021-39239 CVE-2022-28890 CVE-2022-45136 CVE-2023-22665 CVE-2023-32200 CVE-2025-49656 CVE-2025-50151 Upstream summary: A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on […]
🟢 Low ⏱ 5–15 min Last verified: 1 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-36083 CVE-2025-45767 Upstream summary: JOSE is "JSON Web Almost Everything" – JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3121 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 CVE-2025-2176 CVE-2025-2177 Upstream summary: Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) before 0.2.25 allows […]
