🟢 Low ⏱ 5–15 min Last verified: 30 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-24392 Upstream summary: In voloko twitter-stream 0.1.10, missing TLS hostname validation allows an attacker to perform a man-in-the-middle attack against users of the library (because eventmachine is misused). […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15225 Upstream summary: django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated `NumberFilter` instances, whose value was […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5022895 • MSRC update-guide entry Related CVEs: CVE-2023-21689 CVE-2023-21690 CVE-2023-21692 CVE-2023-21684 CVE-2023-21701 CVE-2023-21797 CVE-2023-21798 CVE-2023-21799 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17567 Upstream summary: Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-11780 CVE-2020-1946 CVE-2018-11781 CVE-2018-11805 CVE-2020-1930 CVE-2020-1931 CVE-2007-2873 CVE-2007-0451 +2 more Upstream summary: pkgsrc audit-packages flagged spamassassin<2.43nb2 for vulnerability class 'remote-code-execution'. Reference: http://cert.uni-stuttgart.de/archive/bugtraq/2003/01/msg00254.html Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-50966 Upstream summary: erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8041-1 Related CVEs: CVE-2023-26132 Upstream summary: Yuhan Gao and Peng Zhou discovered that Dottie was vulnerable to prototype pollution when altering the __proto__ magical attribute. An attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.19.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-httplib2 0.19.0-r0 Related CVEs: CVE-2021-21240 Upstream summary: Alpine community repository for vv3.18 ships py3-httplib2 0.19.0-r0 which addresses CVE-2021-21240. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 30 September 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-11238 Related CVEs: CVE-2023-45803 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2010-0436 CVE-2007-4224 CVE-2007-3820 CVE-2007-4569 CVE-2007-5963 Upstream summary: pkgsrc audit-packages flagged kdebase<3.0.5.1 for vulnerability class 'remote-code-execution'. Reference: http://www.kde.org/info/security/advisory-20021220-1.txt Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
