🟢 Low ⏱ 5–15 min Last verified: 13 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnutls — multiple certificate verification issues Related CVEs: CVE-2014-0092 CVE-2014-1959 Upstream summary: GnuTLS project reports: A vulnerability was discovered that affects the certificate verification functions of all gnutls versions. A […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache Ant leaks sensitive information via the java.io.tmpdir Related CVEs: CVE-2020-1945 Upstream summary: Apache reports: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 4.5.4-r0 📖 ~4 min read • Source: Alpine secdb entry — pgpool 4.5.4-r0 Related CVEs: CVE-2024-45624 Upstream summary: Alpine main repository for vedge ships pgpool 4.5.4-r0 which addresses CVE-2024-45624. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2010-4409 Upstream summary: pkgsrc audit-packages flagged php5-intl<5.2.15.1.1.2 for vulnerability class 'integer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2010-4409 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 13 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lha — numerous vulnerabilities when extracting archives Related CVEs: CVE-2004-0234 CVE-2004-0235 CVE-2004-0694 CVE-2004-0745 CVE-2004-0769 CVE-2004-0771 Upstream summary: Source code reviews of lha by Lukasz Wojtow, Thomas Biege, and others uncovered […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5028228 • MSRC update-guide entry Related CVEs: CVE-2023-35352 CVE-2023-35365 CVE-2023-35366 CVE-2023-35367 CVE-2023-32057 CVE-2023-35297 CVE-2023-21756 CVE-2023-33166 +12 more Affected components: Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 13 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5514 CVE-2020-14929 CVE-2021-38370 CVE-2021-46853 Upstream summary: Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.2.8-r0 📖 ~4 min read • Source: Alpine secdb entry — cacti 1.2.8-r0 Related CVEs: CVE-2020-8813 CVE-2020-7237 CVE-2020-7106 CVE-2024-43362 CVE-2024-43363 CVE-2024-43364 CVE-2024-43365 CVE-2024-27082 +12 more Upstream summary: Alpine community repository for vedge ships cacti 1.2.8-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 13 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0996 CVE-2004-2541 CVE-2006-4262 CVE-2009-0148 CVE-2009-1577 Upstream summary: main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xlockmore — local exploit Related CVEs: CVE-2012-4524 Upstream summary: Ignatios Souvatzis of NetBSD reports: Due to an error in the dclock screensaver in xlockmore, users who explicitly use this screensaver […]
