🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0037-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-23170 Upstream summary: An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in […]
🟡 Medium ⏱ 10–30 min Last verified: 28 February 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9243 (see also SUSE bugzilla) Related CVEs: CVE-2023-51764 CVE-2023-32182 Upstream summary: Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2024 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — Multiple vulnerabilities Related CVEs: CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302 +12 more Upstream summary: The OpenSSL project reports: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14601-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25885 Upstream summary: An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.8-r5 📖 ~4 min read • Source: Alpine secdb entry — avahi 0.8-r5 Related CVEs: CVE-2021-3502 CVE-2021-3468 CVE-2017-6519 CVE-2018-1000845 CVE-2021-26720 Upstream summary: Alpine main repository for vv3.18 ships avahi 0.8-r5 which addresses CVE-2021-3502. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache Tomcat — Multiple Vulnerabilities Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 CVE-2010-1157 CVE-2011-0013 CVE-2012-0022 CVE-2012-2733 +12 more Upstream summary: [email protected] reports: A race condition on connection close could trigger a […]
🟡 Medium ⏱ 15–45 min Last verified: 27 February 2024 Affected versions: IBM AIX 7.1 Affected: 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2023-40371, IBM Support Bulletin CVE: CVE-2023-40371 NVD summary: IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-491 Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-25657 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39}-m2crypto-[0-9]* for vulnerability class 'timing-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-25657 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
