🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.1.0-r9 📖 ~4 min read • Source: Alpine secdb entry — yajl 2.1.0-r9 Related CVEs: CVE-2023-33460 Upstream summary: Alpine main repository for vedge ships yajl 2.1.0-r9 which addresses CVE-2023-33460. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nomad — multiple vulnerabilities Related CVEs: CVE-2020-27195 Upstream summary: The HashiCorp team reports: artifact: Fixed a bug where interpolation can be used in the artifact destination field to write artifact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-7132 CVE-2016-7130 CVE-2016-7131 CVE-2016-7129 CVE-2016-7413 CVE-2016-7418 Upstream summary: pkgsrc audit-packages flagged php70-wddx<7.0.10 for vulnerability class 'null-dereference'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7132 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1253 Upstream summary: The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8842 CVE-2017-8843 CVE-2017-8844 CVE-2017-8845 CVE-2017-8846 CVE-2017-8847 CVE-2017-9928 CVE-2017-9929 +12 more Upstream summary: The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-1000003 CVE-2017-15092 CVE-2017-15090 CVE-2017-15093 CVE-2016-7073 CVE-2016-7074 CVE-2019-3806 CVE-2019-3807 +6 more Upstream summary: pkgsrc audit-packages flagged pdns-recursor>=4.1.0<4.1.1 for vulnerability class 'spoofing'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-1000003 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged logsurfer<1.5.2 for vulnerability class 'local-user-shell'. Reference: http://www.cert.dfn.de/eng/team/wl/logsurf/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3357 Upstream summary: gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5044090 • MSRC update-guide entry Related CVEs: CVE-2024-43483 CVE-2024-43484 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33038 Upstream summary: An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration […]
