🟢 Low ⏱ 5–15 min Last verified: 21 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8242-1 Related CVEs: CVE-2023-28447 Upstream summary: Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not properly escape JavaScript code. An attacker could possibly use this issue to conduct a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-32294 Upstream summary: pkgsrc audit-packages flagged libgig-[0-9]* for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-32294 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 21 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6407-2 Related CVEs: CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2023-3138 CVE-2021-31535 CVE-2020-14344 CVE-2020-14363 CVE-2016-7942 +4 more Upstream summary: USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:0377 Related CVEs: CVE-2024-3661 CVE-2024-6501 Upstream summary: NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0384-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-46898 Upstream summary: views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6961 Related CVEs: CVE-2024-6923 CVE-2024-8088 CVE-2024-4032 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0012 (see also SUSE bugzilla) Related CVEs: CVE-2024-35195 Upstream summary: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made […]
🟠 High ⏱ 15–60 min Last verified: 21 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-7118 Related CVEs: CVE-2024-9355 CVE-2024-1394 CVE-2024-34158 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4330-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-33065 Upstream summary: Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an […]
