🟡 Medium ⏱ 10–30 min Last verified: 8 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10751 CVE-2022-0430 CVE-2022-24737 CVE-2023-48052 Upstream summary: All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15216 CVE-2020-7711 Upstream summary: In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2831 Upstream summary: Buffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root privileges via a large string in the XAUTHORITY environment variable. Table […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23607 Upstream summary: treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq.client.HTTPClient` constructor accept […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0079 CVE-2016-10894 Upstream summary: Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 7 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000164 CVE-2024-1135 CVE-2024-6827 Upstream summary: gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result […]
🟢 Low ⏱ 5–15 min Last verified: 6 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10747 CVE-2021-23440 Upstream summary: set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype […]
🟡 Medium ⏱ 10–30 min Last verified: 6 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1498 CVE-2013-4366 CVE-2014-3577 CVE-2015-5262 CVE-2020-13956 Upstream summary: Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the […]
🟠 High ⏱ 15–60 min Last verified: 6 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4116 CVE-2016-3956 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 CVE-2020-15095 CVE-2021-39134 CVE-2021-39135 +2 more Upstream summary: lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via […]
🟢 Low ⏱ 5–15 min Last verified: 6 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-55564 Upstream summary: The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
