🟢 Low ⏱ 5–15 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2947 Upstream summary: Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which […]
🟢 Low ⏱ 5–15 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6678 Upstream summary: The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute […]
🟢 Low ⏱ 5–15 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11627 Upstream summary: gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0391 Upstream summary: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-30151 CVE-2022-23837 Upstream summary: Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used. Table of […]
🟠 High ⏱ 15–60 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1735 CVE-2005-0073 CVE-2008-1648 CVE-2008-4476 CVE-2012-2352 CVE-2015-1306 CVE-2018-1000550 CVE-2018-1000671 +7 more Upstream summary: Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 20 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-3180 Upstream summary: Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via […]
🟡 Medium ⏱ 5–30 min Last verified: 19 October 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 19 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2208 Upstream summary: tpp 1.3.1 allows remote attackers to execute arbitrary commands via a –exec command in a TPP template file. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 19 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0972 CVE-2006-4573 CVE-2009-1214 CVE-2009-1215 CVE-2015-6806 CVE-2017-5618 CVE-2020-9366 CVE-2021-26937 +4 more Upstream summary: Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows […]
