🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738 Upstream summary: The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14332 CVE-2021-40826 CVE-2021-40827 Upstream summary: An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1034 CVE-2002-1049 CVE-2002-1050 CVE-2003-0886 CVE-2004-1182 CVE-2005-3069 CVE-2005-3070 CVE-2005-3538 +3 more Upstream summary: Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0129 CVE-2004-1055 CVE-2004-1147 CVE-2004-1148 CVE-2004-2630 CVE-2004-2631 CVE-2004-2632 CVE-2005-0459 +12 more Upstream summary: Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 21 June 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-25648 CVE-2022-46648 CVE-2022-47318 Upstream summary: The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) […]
🟡 Medium ⏱ 10–30 min Last verified: 21 June 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13124 CVE-2021-29488 CVE-2023-34237 Upstream summary: SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python […]
🟠 High ⏱ 15–60 min Last verified: 20 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1658 CVE-2011-1485 CVE-2011-4945 CVE-2013-4288 CVE-2015-3218 CVE-2015-3255 CVE-2015-4625 CVE-2016-2568 +8 more Upstream summary: Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32677 Upstream summary: FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29662 Upstream summary: The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some […]
🟡 Medium ⏱ 10–30 min Last verified: 20 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7182 CVE-2019-6442 CVE-2019-6443 CVE-2019-6444 CVE-2019-6445 CVE-2021-22212 CVE-2023-4012 Upstream summary: The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds […]
