🟡 Medium ⏱ 10–30 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1756 CVE-2010-2945 CVE-2013-4412 Upstream summary: SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-11372 CVE-2019-11373 CVE-2020-15395 CVE-2020-26797 Upstream summary: pkgsrc audit-packages flagged libmediainfo<20.03 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-11372 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 13 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-34145 CVE-2021-34146 CVE-2021-34147 CVE-2021-34148 Upstream summary: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1458-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-25577 Upstream summary: Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number […]
🟢 Low ⏱ 5–15 min Last verified: 13 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5551-1 Related CVEs: CVE-2022-2255 Upstream summary: It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:2439-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12083 CVE-2020-1967 CVE-2022-21658 CVE-2018-1000622 Upstream summary: The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-3736 Upstream summary: pkgsrc audit-packages flagged smalltalk<3.1nb6 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3898-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31256 CVE-2023-51765 Upstream summary: A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-3026 Related CVEs: CVE-2023-52922 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged libgdiplus<2.6nb1 for vulnerability class 'remote-system-access'. Reference: http://secunia.com/advisories/40792/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
