🟢 Low ⏱ 5–15 min Last verified: 19 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xrdp — privilege escalation Related CVEs: CVE-2017-16927 CVE-2022-23613 Upstream summary: xrdp project reports: An integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged sccache-[0-9]* for vulnerability class 'unknown'. Reference: https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: devel/viewvc-devel is vulnerable to cross-site scripting Related CVEs: CVE-2023-22456 CVE-2023-22464 Upstream summary: C. Michael Pilato reports: security fix: escape revision view copy paths (#311) [CVE-2023-22464] security fix: escape revision view […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hcode — buffer overflow in mail.c Related CVEs: CVE-2024-34020 Upstream summary: The openSUSE project reports: The problematic function in question is putSDN() in mail.c. The static variable `cp` is used […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-2185 Upstream summary: pkgsrc audit-packages flagged fabric<1.1.0 for vulnerability class 'local-security-bypass'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2185 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-7185 CVE-2012-3355 Upstream summary: GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5035930 • MSRC update-guide entry Related CVEs: CVE-2024-21407 CVE-2024-21429 CVE-2024-21430 CVE-2024-21439 CVE-2024-21441 CVE-2024-21444 CVE-2024-21446 CVE-2024-21450 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 19 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12096 CVE-2018-12097 CVE-2018-12098 CVE-2019-17263 CVE-2019-17264 CVE-2019-17401 Upstream summary: The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based buffer over-read) […]
🟡 Medium ⏱ 10–30 min Last verified: 19 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28483 CVE-2020-36567 CVE-2023-26125 CVE-2023-29401 Upstream summary: This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's IP can be spoofed by […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6780-1 Related CVEs: CVE-2024-3651 Upstream summary: Guido Vranken discovered that idna did not properly manage certain inputs, which could lead to significant resource consumption. An attacker could possibly use this […]
