🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-34490 Upstream summary: In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local […]
The NIST Cybersecurity Framework has become a cornerstone for organizations seeking to enhance their cybersecurity posture in an increasingly digital world. This framework, developed by the National Institute of Standards and Technology (NIST), provides a comprehensive set of guidelines and best practices to help organizations manage and mitigate cybersecurity risks effectively.
🟠 High ⏱ 15–60 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6426 CVE-2019-12046 CVE-2019-13031 CVE-2019-15941 CVE-2019-19791 CVE-2020-16093 CVE-2020-24660 CVE-2021-35472 +11 more Upstream summary: LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4420 Related CVEs: CVE-2024-4467 CVE-2022-40284 CVE-2023-3354 CVE-2020-35517 CVE-2020-10756 CVE-2020-14364 CVE-2019-20382 CVE-2020-8608 +12 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mail/trojita — may leak mail contents (not user credentials) over unencrypted connection Related CVEs: CVE-2014-2567 Upstream summary: Jan Kundrát reports: An SSL stripping vulnerability was discovered in Trojitá, a fast […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1227 CVE-2005-2977 CVE-2009-0579 CVE-2009-0887 CVE-2009-3232 CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 +12 more Upstream summary: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5026382 • MSRC update-guide entry Related CVEs: CVE-2023-28283 CVE-2023-24903 CVE-2023-24943 CVE-2023-29325 CVE-2023-28251 CVE-2023-24939 CVE-2023-24900 CVE-2023-24940 +6 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0878 Upstream summary: Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 5.4-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-yaml 5.4-r0 Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: Alpine main repository for vv3.19 ships py3-yaml 5.4-r0 which addresses CVE-2020-14343. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2504 Upstream summary: Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current […]
