🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3807 Upstream summary: ansi-regex is vulnerable to Inefficient Regular Expression Complexity Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17572 CVE-2019-20933 CVE-2022-36640 Upstream summary: InfluxDB 0.9.5 has Reflected XSS in the Write Data module. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-55566 Upstream summary: ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17400 Upstream summary: The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2008 CVE-2009-0751 CVE-2009-4495 CVE-2011-4350 CVE-2011-5025 CVE-2016-1000108 CVE-2017-10974 CVE-2020-24379 +1 more Upstream summary: Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-12224 Upstream summary: Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3146 CVE-2005-3147 CVE-2005-3148 CVE-2020-7040 Upstream summary: StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7436 CVE-2017-18635 Upstream summary: noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4023 CVE-2009-4111 Upstream summary: Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0640 CVE-2004-0911 CVE-2004-0998 CVE-2005-0469 CVE-2020-10188 Upstream summary: Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code. […]
