🟠 High ⏱ 15–60 min Last verified: 5 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0906 CVE-2002-1165 CVE-2002-1337 CVE-2002-1827 CVE-2002-2261 CVE-2003-0161 CVE-2003-0308 CVE-2003-0681 +11 more Upstream summary: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-2236 CVE-2006-3400 Upstream summary: pkgsrc audit-packages flagged quake3arena<1.32c for vulnerability class 'remote-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2236 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 5 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: pkgsrc audit-packages flagged qmail<1.03nb49 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2005-1513 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 5 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-9284 CVE-2017-18076 CVE-2020-36599 Upstream summary: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.2.0-r0 📖 ~4 min read • Source: Alpine secdb entry — kpmcore 4.2.0-r0 Related CVEs: CVE-2020-27187 Upstream summary: Alpine community repository for vv3.19 ships kpmcore 4.2.0-r0 which addresses CVE-2020-27187. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 5 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13445 CVE-2019-13465 CVE-2019-13566 CVE-2020-16124 CVE-2021-37146 CVE-2024-39289 CVE-2024-39835 CVE-2024-41148 +2 more Upstream summary: An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() […]
🟢 Low ⏱ 5–15 min Last verified: 5 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-38517 CVE-2024-39684 Upstream summary: Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5037037 • MSRC update-guide entry Related CVEs: CVE-2024-21409 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 5 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6858-1 Related CVEs: CVE-2023-49990 CVE-2023-49991 CVE-2023-49992 CVE-2023-49993 CVE-2023-49994 Upstream summary: It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this […]
