🟡 Medium ⏱ 10–30 min Last verified: 18 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3448 CVE-2013-0275 CVE-2013-1770 CVE-2013-6395 CVE-2015-6816 Upstream summary: Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors. Table of […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4445 CVE-2014-3686 CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 +12 more Upstream summary: Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6939 CVE-2008-3916 Upstream summary: GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the open_sbuf function. Table […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1319 Upstream summary: chpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against dietlibc, does not properly handle when multiple groups are specified […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9590 Upstream summary: puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet […]
🟡 Medium ⏱ 10–30 min Last verified: 17 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2491 CVE-2008-0668 CVE-2009-0318 CVE-2013-6836 Upstream summary: Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and […]
🟡 Medium ⏱ 10–30 min Last verified: 17 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1318 CVE-2008-1468 CVE-2009-5028 CVE-2011-4345 Upstream summary: Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-1521 Upstream summary: On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library […]
🟢 Low ⏱ 5–15 min Last verified: 16 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-25010 CVE-2020-25575 Upstream summary: An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_type_id__ is overridden. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4447 CVE-2006-7236 CVE-2008-2383 CVE-2021-27135 CVE-2022-24130 CVE-2022-45063 CVE-2023-40359 Upstream summary: X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for […]
