🟡 Medium ⏱ 10–30 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14462 CVE-2019-14463 CVE-2022-0367 CVE-2024-10918 CVE-2024-36843 CVE-2024-36844 CVE-2024-36845 Upstream summary: An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the […]
🟡 Medium ⏱ 10–30 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1987 CVE-2016-7949 CVE-2016-7950 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13421 Upstream summary: Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.4.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-paramiko 3.4.0-r0 Related CVEs: CVE-2023-48795 CVE-2018-1000805 CVE-2018-7750 Upstream summary: Alpine community repository for vv3.19 ships py3-paramiko 3.4.0-r0 which addresses CVE-2023-48795. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9584 Upstream summary: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-2665 CVE-2006-4339 CVE-2009-3555 Upstream summary: pkgsrc audit-packages flagged openoffice3-bin<3.4.1 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2665 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟠 High ⏱ 15–60 min Last verified: 15 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12435 CVE-2018-20187 CVE-2018-9127 CVE-2018-9860 CVE-2021-24115 CVE-2021-40529 CVE-2022-43705 CVE-2024-34702 +7 more Upstream summary: Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6808-1 Related CVEs: CVE-2023-52076 Upstream summary: It was discovered that Atril was vulnerable to a path traversal attack. An attacker could possibly use this vulnerability to create arbitrary files on […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5025224 • MSRC update-guide entry Related CVEs: CVE-2023-21554 CVE-2023-28219 CVE-2023-28220 CVE-2023-28232 CVE-2023-28250 CVE-2023-21769 CVE-2023-21729 CVE-2023-21727 +12 more Affected components: Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8191-1 Related CVEs: CVE-2024-47554 Upstream summary: It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this issue […]
