🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.650-r0 📖 ~4 min read • Source: Alpine secdb entry — lrzip 0.650-r0 Related CVEs: CVE-2022-28044 CVE-2022-26291 CVE-2021-27347 CVE-2021-27345 CVE-2020-25467 Upstream summary: Alpine community repository for vv3.19 ships lrzip 0.650-r0 which addresses CVE-2022-28044. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 7 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17626 CVE-2019-19450 CVE-2020-28463 CVE-2023-33733 Upstream summary: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5022894 • MSRC update-guide entry Related CVEs: CVE-2023-21689 CVE-2023-21690 CVE-2023-21692 CVE-2023-21684 CVE-2023-21701 CVE-2023-21797 CVE-2023-21798 CVE-2023-21799 +12 more Affected components: Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5025792 • MSRC update-guide entry Related CVEs: CVE-2023-24897 CVE-2023-21808 Affected components: Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2016 Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 7 March 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7556-1 Related CVEs: CVE-2024-6484 CVE-2024-6531 CVE-2024-6485 Upstream summary: It was discovered that Bootstrap did not correctly sanitize certain input in the carousel component. An attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-3497 CVE-2022-1920 CVE-2024-47540 CVE-2024-47834 CVE-2021-3498 CVE-2021-3522 CVE-2022-2122 CVE-2022-1923 +12 more Upstream summary: pkgsrc audit-packages flagged gstreamer1<1.18.4 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-3497 Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6744-1 Related CVEs: CVE-2024-28219 CVE-2023-44271 CVE-2023-50447 CVE-2022-24303 CVE-2022-45198 CVE-2022-22817 CVE-2021-23437 CVE-2021-34552 +12 more Upstream summary: Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged gst-plugins0.10-png<0.10.15nb1 for vulnerability class 'arbitrary-code-execution'. Reference: http://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=d9544bcc44adcef769cbdf7f6453e140058a3adc Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4496-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1183 Upstream summary: A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7739-1 Related CVEs: CVE-2021-25215 CVE-2021-25216 CVE-2021-25214 CVE-2023-50387 CVE-2023-50868 CVE-2023-3341 CVE-2023-2828 CVE-2016-2775 +12 more Upstream summary: Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could […]
