GCVE - cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*

part: o version: 10 update: *

Vendor	Debian (`4199fb5b-36f6-5ceb-83d5-855460345e36`)
Product	Debian Linux (`fe80e0fa-9f7e-57a5-8616-37d145025527`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-7101`	vulnerable	2026-06-08 06:21:57.033728	Arbitrary Code Execution (ACE) Vulnerability Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic. Published: 2023-12-24T21:34:46.527Z Updated: 2025-10-21T23:05:29.481Z Open on db.gcve.eu Reference links https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0019.md https://https://www.cve.org/CVERecord?id=CVE-2023-7101 https://https://metacpan.org/dist/Spreadsheet-ParseExcel https://https://github.com/haile01/perl_spreadsheet_excel_rce_poc https://github.com/jmcnamara/spreadsheet-parseexcel/blob/c7298592e102a375d43150cd002feed806557c15/lib/Spreadsheet/ParseExcel/Utility.pm#L171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-43770`	vulnerable	2026-06-08 06:12:37.938455	Details available Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior. Published: 2023-09-22T00:00:00.000Z Updated: 2025-10-21T23:05:36.969Z Open on db.gcve.eu Reference links https://github.com/roundcube/roundcubemail/commit/e92ec206a886461245e1672d8530cc93c618a49b https://roundcube.net/news/2023/09/15/security-update-1.6.3-released https://lists.debian.org/debian-lts-announce/2023/09/msg00024.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24368`	vulnerable	2026-06-08 05:22:32.883474	Details available Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web 2. This issue is fixed in Icinga Web 2 in v2.6.4, v2.7.4 and v2.8.2. Published: 2020-08-19T14:25:07.000Z Updated: 2024-08-04T15:12:08.598Z Open on db.gcve.eu Reference links https://github.com/Icinga/icingaweb2/blob/master/CHANGELOG.md https://github.com/Icinga/icingaweb2/issues/4226 https://icinga.com/2020/08/19/icinga-web-security-release-v2-6-4-v2-7-4-and-v2-8-2/ https://www.debian.org/security/2020/dsa-4747 https://lists.debian.org/debian-lts-announce/2020/08/msg00040.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.