🟢 Low ⏱ 5–15 min Last verified: 24 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26298 Upstream summary: Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8189 CVE-2020-8225 CVE-2020-8227 CVE-2021-22879 CVE-2021-22895 CVE-2021-32728 CVE-2022-39331 CVE-2022-39332 +11 more Upstream summary: A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4551 CVE-2009-0790 CVE-2009-1957 CVE-2009-1958 CVE-2009-2185 CVE-2009-2661 CVE-2010-2628 CVE-2012-2388 +12 more Upstream summary: strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0230 CVE-2005-3660 CVE-2007-3719 CVE-2008-2544 CVE-2008-4609 CVE-2010-4563 CVE-2010-5313 CVE-2010-5321 +12 more Upstream summary: TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence […]
🟢 Low ⏱ 5–15 min Last verified: 22 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7370 CVE-2018-3717 Upstream summary: node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 22 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12563 CVE-2018-12564 CVE-2018-12565 CVE-2022-42902 CVE-2022-44641 CVE-2022-45132 Upstream summary: An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn […]
🟢 Low ⏱ 5–15 min Last verified: 22 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1308 CVE-2006-5969 Upstream summary: CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns […]
🟡 Medium ⏱ 10–30 min Last verified: 22 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28590 CVE-2020-28591 CVE-2021-44961 CVE-2021-44962 CVE-2021-45846 CVE-2021-45847 CVE-2022-36788 Upstream summary: An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. […]
🟡 Medium ⏱ 10–30 min Last verified: 22 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40391 CVE-2021-40393 CVE-2021-40394 CVE-2021-40400 CVE-2021-40401 CVE-2021-40402 CVE-2021-40403 CVE-2023-4508 Upstream summary: An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit […]
