🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-58266 Upstream summary: The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. Table of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.9.0-r1 📖 ~4 min read • Source: Alpine secdb entry — libssh2 1.9.0-r1 Related CVEs: CVE-2019-17498 CVE-2019-13115 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 +4 more Upstream summary: Alpine main repository for vv3.19 ships libssh2 1.9.0-r1 which […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-47480 Upstream summary: An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. Table of contents […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5022339 • MSRC update-guide entry Related CVEs: CVE-2023-21546 CVE-2023-21543 CVE-2023-21548 CVE-2023-21555 CVE-2023-21556 CVE-2023-21561 CVE-2023-21679 CVE-2023-21730 +12 more Affected components: Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-32637 Upstream summary: GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3502-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6462 Upstream summary: An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17528 Upstream summary: backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.3.19-r2 📖 ~4 min read • Source: Alpine secdb entry — hivex 1.3.19-r2 Related CVEs: CVE-2021-3504 Upstream summary: Alpine community repository for vv3.18 ships hivex 1.3.19-r2 which addresses CVE-2021-3504. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-1828 Related CVEs: CVE-2024-21068 CVE-2024-21012 CVE-2024-21011 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2010-2445 CVE-2012-5645 CVE-2012-6083 Upstream summary: pkgsrc audit-packages flagged freeciv-server<2.2.1 for vulnerability class 'remote-system-access'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2445 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
