🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7870-1 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5022289 • MSRC update-guide entry Related CVEs: CVE-2023-21535 CVE-2023-21546 CVE-2023-21543 CVE-2023-21548 CVE-2023-21555 CVE-2023-21556 CVE-2023-21561 CVE-2023-21679 +12 more Affected components: Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6066-1 Related CVEs: CVE-2023-1625 Upstream summary: It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-4800 CVE-2007-2948 CVE-2008-0629 CVE-2008-0630 CVE-2008-1558 CVE-2008-3827 CVE-2010-3429 CVE-2006-0579 +2 more Upstream summary: pkgsrc audit-packages flagged gmplayer<1.0rc1nb1 for vulnerability class 'remote-code-execution'. Reference: http://www.mplayerhq.hu/homepage/news.html#vuln01 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 29 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6684-1 Related CVEs: CVE-2023-50495 CVE-2020-19189 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 CVE-2017-16879 +12 more Upstream summary: It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6307-1 Related CVEs: CVE-2023-37464 Upstream summary: It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0412-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-9774 Upstream summary: A vulnerability was found in python-sql where unary operators do not escape non-Expression. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 29 January 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-10834 Related CVEs: CVE-2024-49761 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14466-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-9632 CVE-2024-31080 CVE-2024-31081 CVE-2024-31083 CVE-2023-6816 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 +6 more Upstream summary: A flaw was found in the X.org server. Due to improperly tracked […]
🟡 Medium ⏱ 10–30 min Last verified: 29 January 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6510 Related CVEs: CVE-2024-39331 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
