🟠 High ⏱ 15–60 min Last verified: 4 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0557 CVE-2014-8145 CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 +12 more Upstream summary: Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 […]
🟡 Medium ⏱ 10–30 min Last verified: 4 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0805 CVE-2004-0560 CVE-2004-0561 CVE-2005-1853 CVE-2005-2772 Upstream summary: Multiple buffer overflows in UMN gopher daemon (gopherd) 2.x and 3.x before 3.0.6 allows attackers to execute arbitrary code via (1) […]
🟢 Low ⏱ 5–15 min Last verified: 4 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2386 CVE-2004-2387 Upstream summary: Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via […]
🟠 High ⏱ 15–60 min Last verified: 4 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3147 CVE-2011-4076 CVE-2011-4596 CVE-2012-0030 CVE-2012-1585 CVE-2012-2101 CVE-2012-2654 CVE-2012-3360 +12 more Upstream summary: Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when […]
🟡 Medium ⏱ 10–30 min Last verified: 3 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0477 CVE-2014-4720 CVE-2015-7686 CVE-2018-12558 Upstream summary: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 3 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3555 CVE-2017-15698 CVE-2018-8019 CVE-2018-8020 Upstream summary: The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in […]
🟠 High ⏱ 15–60 min Last verified: 3 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9905 CVE-2015-5395 CVE-2016-6188 CVE-2016-6189 CVE-2016-6190 CVE-2016-6191 CVE-2020-22402 CVE-2021-33054 +12 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 3 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-20199 Upstream summary: Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust […]
🟢 Low ⏱ 5–15 min Last verified: 3 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6306 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the […]
🟡 Medium ⏱ 10–30 min Last verified: 2 October 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28594 CVE-2020-28595 CVE-2020-28596 CVE-2020-28598 CVE-2023-47268 Upstream summary: A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted 3MF […]
