December 2024

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged thunderbird38<38.8.0 for vulnerability class 'multiple-vulnerabilities'. Reference: https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.8 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-0334 CVE-2016-7954 CVE-2019-3881 CVE-2020-36327 CVE-2021-43809 Upstream summary: pkgsrc audit-packages flagged ruby{18,193,200}-bundler<1.7.3 for vulnerability class 'restriction-bypass'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0334 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-0805 CVE-2019-7548 CVE-2019-7164 Upstream summary: pkgsrc audit-packages flagged py{24,25,26,27,31}-sqlalchemy<0.7.0 for vulnerability class 'sql-injection'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0805 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-1000418 CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 Upstream summary: pkgsrc audit-packages flagged libwildmidi<0.4.2 for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-1000418 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-45943 Upstream summary: pkgsrc audit-packages flagged gdallib-[0-9]* for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-45943 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-3226 CVE-2015-7576 CVE-2015-7578 CVE-2015-7577 CVE-2015-7580 CVE-2015-8477 CVE-2016-10515 CVE-2017-15568  +12 more Upstream summary: pkgsrc audit-packages flagged ruby{18,193,200,21,22}-redmine<3.1.0 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3226 Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-1912 CVE-2014-2667 CVE-2016-0772 CVE-2016-5636 CVE-2016-5699 CVE-2017-1000158 CVE-2019-9740 CVE-2019-9947  +8 more Upstream summary: pkgsrc audit-packages flagged python34<3.4rc1 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1912 Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-39286 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39,310,311}-jupyter_core<4.11.2 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-39286 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-8419 CVE-2017-13712 CVE-2017-15018 CVE-2017-15019 CVE-2017-15046 CVE-2015-9099 CVE-2015-9100 CVE-2015-9101  +9 more Upstream summary: pkgsrc audit-packages flagged lame<3.99.5nb2 for vulnerability class 'arbitrary-code-execution'. Reference: http://secunia.com/advisories/62995/ Table of contents Symptom & Impact Environment […]