🟢 Low ⏱ 5–15 min Last verified: 13 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8855 CVE-2022-25883 Upstream summary: The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a […]
🟢 Low ⏱ 5–15 min Last verified: 13 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1522 CVE-2015-5723 Upstream summary: Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL […]
🟢 Low ⏱ 5–15 min Last verified: 13 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5149 Upstream summary: fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 13 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2864 CVE-2012-5129 CVE-2013-1872 CVE-2013-1993 CVE-2019-5068 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922 +2 more Upstream summary: Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series […]
🟢 Low ⏱ 5–15 min Last verified: 12 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8378 Upstream summary: In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 12 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3931 CVE-2016-8714 CVE-2020-27637 CVE-2024-27322 Upstream summary: javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 12 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-5444 CVE-2020-24661 Upstream summary: Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote […]
🟢 Low ⏱ 5–15 min Last verified: 12 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-41138 Upstream summary: In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 12 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0689 CVE-2009-2463 CVE-2013-5607 CVE-2014-1545 CVE-2015-7183 CVE-2016-1951 Upstream summary: Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation […]
🟢 Low ⏱ 5–15 min Last verified: 12 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13990 Upstream summary: initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. Table of contents Symptom & Impact Environment & Reproduction […]
