🟢 Low ⏱ 5–15 min Last verified: 8 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11037 Upstream summary: In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address […]
🟡 Medium ⏱ 10–30 min Last verified: 7 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5065 CVE-2011-1156 CVE-2011-1157 CVE-2011-1158 CVE-2012-2921 Upstream summary: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject […]
🟢 Low ⏱ 5–15 min Last verified: 7 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0606 CVE-2004-0451 Upstream summary: sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 7 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16926 Upstream summary: Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-3651 Upstream summary: A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-25901 Upstream summary: Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function, which uses an insecure regular […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2369 CVE-2015-8833 Upstream summary: Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 6 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10127 CVE-2016-10149 CVE-2017-1000246 CVE-2017-1000433 CVE-2020-5390 CVE-2021-21238 CVE-2021-21239 Upstream summary: PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response. […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14983 Upstream summary: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can […]
🟢 Low ⏱ 5–15 min Last verified: 6 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1127 Upstream summary: Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly […]
