Debian

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-19351 CVE-2018-19352 CVE-2018-21030 CVE-2018-8768 CVE-2019-10255 CVE-2019-9644 CVE-2020-26215 CVE-2021-32798  +3 more Upstream summary: Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking […]

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 CVE-2005-0891 CVE-2005-2975 CVE-2005-2976 CVE-2005-3186 CVE-2007-0010  +6 more Upstream summary: Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-40589 Upstream summary: ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits. Table of contents Symptom & Impact Environment & Reproduction […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-0415 Upstream summary: Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-29074 Upstream summary: scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user. Table of contents Symptom & Impact […]

🟠 High   ⏱ 15–60 min  Last verified: 20 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-1807 CVE-2007-3215 CVE-2015-8476 CVE-2016-10033 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 CVE-2020-13625  +2 more Upstream summary: The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a […]

🟠 High   ⏱ 15–60 min  Last verified: 20 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-5238 CVE-2022-24724 CVE-2022-39209 CVE-2023-22483 CVE-2023-22484 CVE-2023-22485 CVE-2023-22486 CVE-2023-24824  +3 more Upstream summary: The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-14662 CVE-2019-14663 CVE-2019-14665 CVE-2020-27372 Upstream summary: Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code. Table of contents Symptom & Impact […]