🟡 Medium ⏱ 10–30 min Last verified: 4 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14340 CVE-2022-0084 CVE-2023-5685 Upstream summary: A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6275 Upstream summary: Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-38999 Upstream summary: jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows attackers to execute arbitrary code or cause a […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-53432 Upstream summary: While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in PCLPointCloud2::at. This issue could potentially be exploited to […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5661 CVE-2024-28168 Upstream summary: In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1624 CVE-2019-12761 Upstream summary: Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4947 Upstream summary: dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13756 Upstream summary: Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1180 Upstream summary: Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash). Table […]
🟠 High ⏱ 15–60 min Last verified: 3 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4491 CVE-2016-4492 CVE-2016-4493 +2 more Upstream summary: Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary […]
