🟢 Low ⏱ 5–15 min Last verified: 20 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2860 CVE-2018-11652 Upstream summary: Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in […]
🟢 Low ⏱ 5–15 min Last verified: 20 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0173 CVE-2007-2654 Upstream summary: xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 20 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6199 CVE-2019-11065 CVE-2019-15052 CVE-2019-16370 CVE-2021-29428 CVE-2021-29429 CVE-2021-32751 CVE-2023-35946 +5 more Upstream summary: ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object. […]
🟠 High ⏱ 15–60 min Last verified: 20 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2050 CVE-2005-2643 CVE-2006-0414 CVE-2006-3407 CVE-2006-3408 CVE-2006-3409 CVE-2006-3410 CVE-2006-3411 +12 more Upstream summary: Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7448 Upstream summary: Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-26291 Upstream summary: Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19308 Upstream summary: In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-5569 Upstream summary: A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14274 Upstream summary: MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31471 CVE-2022-33977 Upstream summary: untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By […]
