🟢 Low ⏱ 5–15 min Last verified: 14 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1875 Upstream summary: The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file. Table of […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-41401 CVE-2023-37476 CVE-2023-41886 CVE-2023-41887 CVE-2024-23833 CVE-2024-47878 CVE-2024-47879 CVE-2024-47880 +3 more Upstream summary: OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0946 CVE-2004-0270 CVE-2004-1876 CVE-2004-1909 CVE-2005-0133 CVE-2005-0218 CVE-2005-1922 CVE-2005-1923 +12 more Upstream summary: Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15168 CVE-2022-0235 Upstream summary: node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was […]
🟠 High ⏱ 15–60 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1767 CVE-2008-2935 CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2870 CVE-2012-2871 CVE-2012-2893 +12 more Upstream summary: Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2910 Upstream summary: The AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000637 Upstream summary: zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-42845 CVE-2024-44825 Upstream summary: An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM […]
🟠 High ⏱ 15–60 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2529 CVE-2011-4862 CVE-2014-3634 CVE-2019-0053 CVE-2020-10188 CVE-2021-40491 CVE-2022-39028 CVE-2023-40303 +4 more Upstream summary: Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14313 Upstream summary: The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg(). […]
