🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0012 (see also SUSE bugzilla) Related CVEs: CVE-2024-35195 Upstream summary: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31631 CVE-2023-0567 CVE-2023-0568 CVE-2023-0662 CVE-2023-3247 CVE-2023-3823 CVE-2023-3824 CVE-2024-11233 +12 more Upstream summary: In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function […]
🟡 Medium ⏱ 10–30 min Last verified: 4 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-28737 CVE-2023-40546 CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551 Upstream summary: There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function […]
🟡 Medium ⏱ 10–30 min Last verified: 4 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2139 CVE-2012-2140 CVE-2015-9097 Upstream summary: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. […]
🟢 Low ⏱ 5–15 min Last verified: 4 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5992 Upstream summary: Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.2.2-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-mako 1.2.2-r0 Related CVEs: CVE-2022-40023 Upstream summary: Alpine main repository for vv3.19 ships py3-mako 1.2.2-r0 which addresses CVE-2022-40023. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 4 December 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6830-1 Related CVEs: CVE-2024-5564 Upstream summary: It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could use this issue to cause NetworkManager to […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7243-1 Related CVEs: CVE-2024-46461 CVE-2023-47359 CVE-2023-47360 CVE-2019-19721 CVE-2020-13428 CVE-2021-25801 CVE-2021-25802 CVE-2021-25803 +4 more Upstream summary: It was discovered that VLC incorrectly handled memory when reading an MMS stream. An attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 4 December 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7472-1 Related CVEs: CVE-2021-42553 CVE-2024-8946 CVE-2024-8947 Upstream summary: Junwha Hong and Wonil Jang discovered that Micropython incorrectly handled the length of a buffer in mp_vfs_umount, leading to a heap-based buffer […]
🟠 High ⏱ 15–60 min Last verified: 4 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5680 CVE-2007-3641 CVE-2007-3644 CVE-2007-3645 CVE-2010-4666 CVE-2011-1777 CVE-2011-1778 CVE-2011-1779 +12 more Upstream summary: The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
