🟠 High ⏱ 15–60 min Last verified: 13 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1366 CVE-2002-1367 CVE-2002-1368 CVE-2002-1369 CVE-2002-1371 CVE-2002-1372 CVE-2002-1383 CVE-2002-1384 +12 more Upstream summary: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create […]
🟢 Low ⏱ 5–15 min Last verified: 12 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6720 Upstream summary: libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than […]
🟢 Low ⏱ 5–15 min Last verified: 12 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-8331 Upstream summary: In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 12 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0274 CVE-2007-2807 CVE-2009-1789 Upstream summary: Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which […]
🟠 High ⏱ 15–60 min Last verified: 12 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-1076 CVE-2021-1077 CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 CVE-2022-28181 CVE-2022-28183 CVE-2022-28184 +12 more Upstream summary: NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1755 CVE-2016-6173 CVE-2019-13207 CVE-2020-28935 Upstream summary: Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 11 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1335 CVE-2002-1348 CVE-2006-6772 CVE-2010-2074 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 +12 more Upstream summary: Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0237 Upstream summary: The ndeb-binary feature in Lookup (lookup-el) allows local users to overwrite arbitrary files via a symlink attack on temporary files. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0360 CVE-2009-0361 CVE-2020-10595 CVE-2023-3326 Upstream summary: Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-0407 CVE-2010-4531 CVE-2016-10109 Upstream summary: Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow […]
