🟢 Low ⏱ 5–15 min Last verified: 23 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-46998 Upstream summary: Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), […]
🟢 Low ⏱ 5–15 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1002200 Upstream summary: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.4.1-r0 📖 ~4 min read • Source: Alpine secdb entry — ffmpeg4 4.4.1-r0 Related CVEs: CVE-2020-20446 CVE-2020-20453 CVE-2020-22015 CVE-2020-22019 CVE-2020-22021 CVE-2020-22037 CVE-2021-38114 CVE-2021-38171 +12 more Upstream summary: Alpine community repository for vv3.19 ships ffmpeg4 4.4.1-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1782 CVE-2016-0787 CVE-2019-13115 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 +7 more Upstream summary: The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 9.31-r0 📖 ~4 min read • Source: Alpine secdb entry — rxvt-unicode 9.31-r0 Related CVEs: CVE-2022-4170 CVE-2021-33477 Upstream summary: Alpine community repository for vv3.18 ships rxvt-unicode 9.31-r0 which addresses CVE-2022-4170. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 23 February 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-2348 CVE-2018-10916 Upstream summary: pkgsrc audit-packages flagged lftp<2.5.3 for vulnerability class 'remote-user-shell'. Reference: http://freshmeat.net/releases/87364/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 23 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6408-1 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2704-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20633 Upstream summary: GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial […]
🟠 High ⏱ 15–60 min Last verified: 23 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-4064 Related CVEs: CVE-2023-37207 CVE-2023-37201 CVE-2023-37211 CVE-2023-37208 CVE-2023-37202 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
