🟢 Low ⏱ 5–15 min Last verified: 8 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: QtNetwork — potential buffer overflow Related CVEs: CVE-2023-51714 Upstream summary: Andy Shaw reports: A potential integer overflow has been discovered in Qt's HTTP2 implementation. If the HTTP2 implementation receives more […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged leafnode<1.9.30 for vulnerability class 'denial-of-service'. Reference: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0123.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 8 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6129 CVE-2018-0739 CVE-2018-12437 CVE-2019-17362 Upstream summary: The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal […]
🟠 High ⏱ 15–60 min Last verified: 8 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities in salt-master process Related CVEs: CVE-2016-1866 CVE-2016-3176 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 +2 more Upstream summary: F-Secure reports: CVE-2020-11651 – Authentication bypass vulnerabilities The ClearFuncs […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-dragonfly — arbitrary code execution Related CVEs: CVE-2013-1756 Upstream summary: Mark Evans reports: Unfortnately there is a security vulnerability in Dragonfly when used with Rails which would potentially allow an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.7.8-r0 📖 ~4 min read • Source: Alpine secdb entry — optipng 0.7.8-r0 Related CVEs: CVE-2023-43907 Upstream summary: Alpine community repository for vedge ships optipng 0.7.8-r0 which addresses CVE-2023-43907. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1624 Related CVEs: CVE-2021-27803 CVE-2023-52160 CVE-2021-0326 CVE-2018-14526 Upstream summary: A flaw was found in the wpa_supplicant, in the way it processes P2P (Wi-Fi Direct) provision discovery requests. This flaw allows […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-46175 Upstream summary: JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-7944 Upstream summary: pkgsrc audit-packages flagged libXfixes<5.0.1 for vulnerability class 'buffer-overflow'. Reference: http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
