🟢 Low ⏱ 5–15 min Last verified: 10 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2232 Upstream summary: The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname. Table of contents Symptom & […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5025285 • MSRC update-guide entry Related CVEs: CVE-2023-21554 CVE-2023-28219 CVE-2023-28220 CVE-2023-28231 CVE-2023-28232 CVE-2023-28250 CVE-2023-21769 CVE-2023-21729 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5030178 • MSRC update-guide entry Related CVEs: CVE-2023-36796 CVE-2023-36793 CVE-2023-36792 CVE-2023-36794 CVE-2023-36788 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5072 Upstream summary: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7146-1 Related CVEs: CVE-2017-7537 CVE-2020-25715 CVE-2022-2414 Upstream summary: Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5895-1 Related CVEs: CVE-2022-38850 CVE-2022-38851 CVE-2022-38855 CVE-2022-38858 CVE-2022-38860 CVE-2022-38861 CVE-2022-38863 CVE-2022-38864 +2 more Upstream summary: It was discovered that MPlayer could be made to divide by zero when processing certain […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-4033 Upstream summary: pkgsrc audit-packages flagged t1lib<5.1.2 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4033 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-10686 CVE-2017-17817 CVE-2017-17820 CVE-2017-17816 CVE-2017-17814 CVE-2017-17813 CVE-2018-19216 CVE-2019-8343 +12 more Upstream summary: pkgsrc audit-packages flagged nasm<2.13.02 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-10686 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6067-1 Related CVEs: CVE-2021-20267 CVE-2021-38598 CVE-2021-40085 CVE-2021-40797 CVE-2022-3277 Upstream summary: David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:0480-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19637 CVE-2018-19639 CVE-2022-45154 CVE-2018-19640 CVE-2018-19638 Upstream summary: Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems […]
