🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0007 CVE-2010-3999 Upstream summary: gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6761-1 Related CVEs: CVE-2024-30187 Upstream summary: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5026361 • MSRC update-guide entry Related CVEs: CVE-2023-28283 CVE-2023-24903 CVE-2023-24943 CVE-2023-29325 CVE-2023-28251 CVE-2023-24939 CVE-2023-24900 CVE-2023-24940 +8 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:6482 Related CVEs: CVE-2023-35789 Upstream summary: The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4438-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40359 Upstream summary: xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka […]
🟠 High ⏱ 15–60 min Last verified: 16 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Grafana — DingDing contact points exposed in Grafana Alerting Related CVEs: CVE-2018-558213 CVE-2021-39226 CVE-2021-41174 CVE-2021-41244 CVE-2021-43798 CVE-2021-43813 CVE-2021-43815 CVE-2022-21702 +12 more Upstream summary: Grafana Labs reports: An incident occurred where […]
🟠 High ⏱ 15–60 min Last verified: 16 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-38528 CVE-2022-45748 CVE-2024-40724 CVE-2024-45679 CVE-2024-46632 CVE-2024-48423 CVE-2024-48424 CVE-2024-48425 +12 more Upstream summary: Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0 📖 ~4 min read • Source: Alpine secdb entry — hermes 0 Related CVEs: CVE-2020-1914 CVE-2020-1915 Upstream summary: Alpine community repository for vv3.18 ships hermes 0 which addresses CVE-2020-1914. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202312-08 Related CVEs: CVE-2023-1729 CVE-2020-24889 CVE-2020-24890 CVE-2020-24870 Upstream summary: A vulnerability has been discovered in LibRaw. Please review the CVE identifier referenced below for details. Table of contents Symptom & Impact Environment […]
Introduction FreeBSD 14 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up install composer on freebsd 14 on FreeBSD 14 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux distribution. This […]
