🟢 Low ⏱ 5–15 min Last verified: 22 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-9240 Upstream summary: ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat […]
🟢 Low ⏱ 5–15 min Last verified: 22 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-2047 Upstream summary: The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated […]
🟡 Medium ⏱ 10–30 min Last verified: 22 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6384 CVE-2014-4615 CVE-2019-3830 Upstream summary: (1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4972 CVE-2024-29156 Upstream summary: OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1988 Upstream summary: Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related […]
🟠 High ⏱ 15–60 min Last verified: 21 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2751 CVE-2012-4528 CVE-2013-1915 CVE-2013-2765 CVE-2013-5705 CVE-2021-42717 CVE-2022-48279 CVE-2023-24021 +3 more Upstream summary: ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the […]
🟠 High ⏱ 15–60 min Last verified: 21 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1477 CVE-2002-1478 CVE-2002-1479 CVE-2004-1736 CVE-2004-1737 CVE-2005-10004 CVE-2005-1524 CVE-2005-1525 +12 more Upstream summary: graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell […]
🟠 High ⏱ 15–60 min Last verified: 20 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2099 CVE-2018-20060 CVE-2018-25091 CVE-2019-11236 CVE-2019-11324 CVE-2020-26137 CVE-2020-7212 CVE-2021-28363 +9 more Upstream summary: Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-4038 CVE-2014-4039 Upstream summary: ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0031 CVE-2003-0032 Upstream summary: Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash). Table of contents Symptom & Impact Environment & […]
