🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2666 Related CVEs: CVE-2024-39936 Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9433 Upstream summary: Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx. Table of […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5034833 • MSRC update-guide entry Related CVEs: CVE-2024-21357 CVE-2024-21340 CVE-2024-21349 CVE-2024-21350 CVE-2024-21352 CVE-2024-21354 CVE-2024-21358 CVE-2024-21360 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 29 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4392 CVE-2009-0858 CVE-2012-1191 Upstream summary: dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45927 CVE-2023-45929 Upstream summary: S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf(). Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14804 Upstream summary: The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-3730 CVE-2014-0472 CVE-2019-19118 CVE-2012-3442 CVE-2012-4520 CVE-2013-4249 CVE-2014-1418 CVE-2014-0473 +12 more Upstream summary: pkgsrc audit-packages flagged py{15,20,21,22,23,24,25,26,27,31}-django<0.95.1 for vulnerability class 'privilege-escalation'. Reference: http://secunia.com/advisories/23826/ Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.4.4-r0 📖 ~4 min read • Source: Alpine secdb entry — icecast 2.4.4-r0 Related CVEs: CVE-2018-18820 Upstream summary: Alpine main repository for vv3.19 ships icecast 2.4.4-r0 which addresses CVE-2018-18820. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6899-1 Related CVEs: CVE-2024-6655 Upstream summary: It was discovered that GTK would attempt to load modules from the current directory, contrary to expectations. If users started GTK applications from shared […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6856-1 Related CVEs: CVE-2024-25081 CVE-2024-25082 Upstream summary: It was discovered that FontForge incorrectly handled filenames. If a user or an automated system were tricked into opening a specially crafted input […]
