🟢 Low ⏱ 5–15 min Last verified: 4 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21897 Upstream summary: A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An […]
🟢 Low ⏱ 5–15 min Last verified: 4 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0252 Upstream summary: Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-18934 CVE-2020-12663 CVE-2009-3602 CVE-2017-15105 CVE-2020-12662 CVE-2020-28935 CVE-2019-25031 CVE-2019-25032 +12 more Upstream summary: pkgsrc audit-packages flagged unbound<1.9.5 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-18934 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 4 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761 CVE-2022-31015 CVE-2024-49768 CVE-2024-49769 Upstream summary: Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for […]
🟡 Medium ⏱ 10–30 min Last verified: 4 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8252 CVE-2021-22918 CVE-2024-24806 Upstream summary: The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.5.0-r0 📖 ~4 min read • Source: Alpine secdb entry — xkbcomp 1.5.0-r0 Related CVEs: CVE-2018-15853 CVE-2018-15859 CVE-2018-15861 CVE-2018-15863 Upstream summary: Alpine main repository for vv3.19 ships xkbcomp 1.5.0-r0 which addresses CVE-2018-15853. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-6516 CVE-2018-7268 Upstream summary: pkgsrc audit-packages flagged sysinfo-[0-9]* for vulnerability class 'local-privilege-escalation'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6516 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 4 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6706 CVE-2019-1785 CVE-2019-1798 CVE-2023-40477 Upstream summary: A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other […]
🟡 Medium ⏱ 10–30 min Last verified: 4 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7449 CVE-2016-2087 CVE-2016-2233 Upstream summary: The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5034274 • MSRC update-guide entry Related CVEs: CVE-2024-29059 CVE-2024-21312 CVE-2024-0056 CVE-2024-0057 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction […]
