🟡 Medium ⏱ 10–30 min Last verified: 2 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4407 CVE-2012-0955 CVE-2013-1061 CVE-2020-15709 Upstream summary: ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.0.8-r0 📖 ~4 min read • Source: Alpine secdb entry — lldpd 1.0.8-r0 Related CVEs: CVE-2020-27827 CVE-2021-43612 Upstream summary: Alpine community repository for vv3.18 ships lldpd 1.0.8-r0 which addresses CVE-2020-27827. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8971 CVE-2018-20167 Upstream summary: Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, […]
Introduction FreeBSD 14 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up take zfs snapshots on freebsd 14 on FreeBSD 14 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux distribution. […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5030183 • MSRC update-guide entry Related CVEs: CVE-2023-36796 CVE-2023-36793 CVE-2023-36792 CVE-2023-36794 CVE-2023-36788 Affected components: Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 4.8 on Windows Server 2016 […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: monotone — remote denial of service in default setup Upstream summary: The monotone developers report: Running "mtn ''" or "mtn ls ''" doesn't cause an internal error anymore. In monotone […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0758 CVE-2005-0953 CVE-2005-1260 CVE-2008-1372 CVE-2010-0405 CVE-2011-4089 CVE-2016-3189 CVE-2019-12900 Upstream summary: zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-7933 CVE-2016-10190 CVE-2016-10191 CVE-2016-10192 CVE-2020-13904 CVE-2014-2263 CVE-2015-3395 CVE-2015-8218 +12 more Upstream summary: pkgsrc audit-packages flagged ffmpeg2<2.5.1 for vulnerability class 'use-after-free'. Reference: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7933 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6559-1 Related CVEs: CVE-2019-0201 CVE-2023-44981 Upstream summary: It was discovered that ZooKeeper incorrectly handled authorization for the getACL() command. A remote attacker could possibly use this issue to obtain sensitive […]
