🟢 Low ⏱ 5–15 min Last verified: 4 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0269 CVE-2020-10663 Upstream summary: The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource […]
🟠 High ⏱ 15–60 min Last verified: 4 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0047 CVE-2014-0048 CVE-2014-5277 CVE-2014-5278 CVE-2014-5282 CVE-2014-6407 CVE-2014-6408 CVE-2014-8178 +12 more Upstream summary: Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-41945 Upstream summary: Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16378 CVE-2019-20790 CVE-2020-12272 CVE-2020-12460 CVE-2021-34555 CVE-2024-25768 Upstream summary: OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2959 CVE-2009-2967 CVE-2019-12300 CVE-2019-7313 Upstream summary: Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1591 CVE-2013-6425 CVE-2014-9766 CVE-2015-5297 CVE-2022-44638 CVE-2023-37769 Upstream summary: Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1141 CVE-2005-1142 CVE-2021-33479 CVE-2021-33480 CVE-2021-33481 Upstream summary: Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3024 CVE-2010-4334 Upstream summary: The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0635 CVE-2018-20374 CVE-2018-20375 CVE-2018-20376 CVE-2019-12495 CVE-2019-9754 Upstream summary: Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21288 CVE-2021-21305 CVE-2023-49090 Upstream summary: CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 […]
