🟢 Low ⏱ 5–15 min Last verified: 29 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pymatgen — regular expression denial of service Related CVEs: CVE-2022-42964 Upstream summary: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an […]
🟢 Low ⏱ 5–15 min Last verified: 29 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5027532 • MSRC update-guide entry Related CVEs: CVE-2023-24897 CVE-2023-24895 CVE-2023-29326 CVE-2023-29331 CVE-2023-32030 CVE-2023-24936 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 29 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SQLite — Corrupt DB can cause a NULL pointer dereference Related CVEs: CVE-2018-8740 Upstream summary: MITRE reports: SQLite databases whose schema is corrupted using a CREATE TABLE AS statement could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-0728 Upstream summary: pkgsrc audit-packages flagged loggerhead<1.18.1 for vulnerability class 'cross-site-scripting'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0728 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 29 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dojo — cross-site scripting and other vulnerabilities Upstream summary: The Dojo Toolkit team reports: Some PHP files did not properly escape input. Some files could operate like "open redirects". A […]
🟡 Medium ⏱ 10–30 min Last verified: 29 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 CVE-2017-6009 CVE-2017-6010 CVE-2017-6011 Upstream summary: Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service […]
![NetBSD 9.4 — xchat-2.0.[0-7] — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4](https://www.progressiverobot.com/wp-content/uploads/2026/05/netbsd-9-4-xchat-2-0-0-7-vulnerability-patch-remediation.jpg "NetBSD 9.4 — xchat — vulnerability — patch and remediation guide 8")
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged xchat for vulnerability class 'remote-code-execution'. Reference: http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.3.9-r0 📖 ~4 min read • Source: Alpine secdb entry — ruby-rexml 3.3.9-r0 Related CVEs: CVE-2024-39908 CVE-2024-41123 CVE-2024-41946 CVE-2024-43398 CVE-2024-49761 Upstream summary: Alpine main repository for vv3.19 ships ruby-rexml 3.3.9-r0 which addresses CVE-2024-39908. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 29 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2656 Upstream summary: Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform […]
