🟡 Medium ⏱ 10–30 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853 CVE-2022-41550 Upstream summary: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-5022 CVE-2010-3087 CVE-2011-0192 CVE-2011-1167 CVE-2012-1173 CVE-2012-2088 CVE-2012-2113 CVE-2012-3401 +9 more Upstream summary: pkgsrc audit-packages flagged suse{,32}_libtiff<9.1nb1 for vulnerability class 'remote-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1308 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5030286 • MSRC update-guide entry Related CVEs: CVE-2023-38161 CVE-2023-38152 CVE-2023-38144 CVE-2023-38143 CVE-2023-38142 CVE-2023-38141 CVE-2023-38139 CVE-2023-36804 +2 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postfix-policyd-weight — working directory symlink vulnerability Upstream summary: postfix-policyd-weight does not check for symlink for its working directory. If the working directory is not already setup by the super root, […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2150 Upstream summary: xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.2.2-r1 📖 ~4 min read • Source: Alpine secdb entry — libsndfile 1.2.2-r1 Related CVEs: CVE-2024-50612 CVE-2019-3832 CVE-2018-19758 CVE-2017-17456 CVE-2017-17457 CVE-2018-19661 CVE-2018-19662 CVE-2018-13139 +8 more Upstream summary: Alpine main repository for vv3.19 ships libsndfile 1.2.2-r1 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.2.2-r0 📖 ~4 min read • Source: Alpine secdb entry — irssi 1.2.2-r0 Related CVEs: CVE-2019-15717 CVE-2019-13045 CVE-2019-5882 CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053 CVE-2018-7054 +12 more Upstream summary: Alpine community repository for vv3.19 ships irssi 1.2.2-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26160 Upstream summary: jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2658 Upstream summary: Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, […]
