🟢 Low ⏱ 5–15 min Last verified: 17 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-27920 Upstream summary: libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: NetBSD advisory NetBSD-SA-2000-011 Upstream summary: pkgsrc audit-packages flagged navigator<4.75 for vulnerability class 'remote-user-access'. Reference: http://www.cert.org/advisories/CA-2000-15.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PuTTY and embedders (f.i., filezilla) — biased RNG with NIST P521/ecdsa-sha2-nistp521 signatures permits recovering private key Related CVEs: CVE-2024-31497 Upstream summary: Simon Tatham reports: ECDSA signatures using 521-bit keys (the […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24839 Upstream summary: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-4012 Upstream summary: pkgsrc audit-packages flagged libthai<0.1.13 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4012 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4683 CVE-2006-0512 Upstream summary: PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-24808 CVE-2023-28428 CVE-2024-42358 Upstream summary: PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerability exists […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0215-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29424 Upstream summary: The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-17144 CVE-2018-20587 CVE-2018-20586 CVE-2021-3195 CVE-2021-3401 CVE-2023-37192 CVE-2015-20111 CVE-2023-50428 +12 more Upstream summary: pkgsrc audit-packages flagged bitcoin<0.16.3 for vulnerability class 'remote-denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-17144 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15010 CVE-2023-26136 Upstream summary: A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to […]
