🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pango — integer overflow Related CVEs: CVE-2009-1194 Upstream summary: oCERT reports: Pango suffers from a multiplicative integer overflow which may lead to a potentially exploitable, heap overflow depending on the […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5371 Upstream summary: screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2008-3252 Upstream summary: pkgsrc audit-packages flagged newsx<1.6nb2 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3252 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-12762 Upstream summary: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.4.6-r0 📖 ~4 min read • Source: Alpine secdb entry — xapian-core 1.4.6-r0 Related CVEs: CVE-2018-0499 Upstream summary: Alpine community repository for vv3.18 ships xapian-core 1.4.6-r0 which addresses CVE-2018-0499. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-0247 CVE-2016-0794 CVE-2016-0795 CVE-2014-9093 Upstream summary: pkgsrc audit-packages flagged libreoffice4-bin>=4.2<4.2.7 for vulnerability class 'arbitrary-code-execution'. Reference: http://www.libreoffice.org/about-us/security/advisories/cve-2014-3693/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10870 Upstream summary: Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other users from being […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19847 Upstream summary: Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-0692 CVE-2021-25217 CVE-2018-5732 Upstream summary: pkgsrc audit-packages flagged isc-dhclient>=4<4.1.0p1 for vulnerability class 'remote-system-access'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5028232 • MSRC update-guide entry Related CVEs: CVE-2023-35352 CVE-2023-35365 CVE-2023-35366 CVE-2023-35367 CVE-2023-32057 CVE-2023-35297 CVE-2023-21756 CVE-2023-33166 +12 more Affected components: Windows Server 2016 (Server Core installation) Windows Server 2016 Table of contents Symptom […]
