🟡 Medium ⏱ 10–30 min Last verified: 25 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7612-1 Related CVEs: CVE-2024-6839 CVE-2024-6866 CVE-2024-6844 CVE-2024-6221 CVE-2024-1681 Upstream summary: It was discovered that Flask-CORS did not correctly handle certain regular expressions. A remote attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:6539 Related CVEs: CVE-2023-31484 Upstream summary: The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fix(es): * perl: CPAN.pm does not verify TLS […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 6.0.9-r0 📖 ~4 min read • Source: Alpine secdb entry — dotnet6-runtime 6.0.9-r0 Related CVEs: CVE-2022-38013 CVE-2022-34716 CVE-2022-30184 CVE-2024-20672 CVE-2024-21409 CVE-2024-21386 CVE-2024-21404 CVE-2024-0056 +12 more Upstream summary: Alpine community repository for vv3.19 ships dotnet6-runtime 6.0.9-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-38828 Related CVEs: CVE-2024-5569 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 24 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761 CVE-2024-49769 Upstream summary: Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line […]
🟢 Low ⏱ 5–15 min Last verified: 24 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2570 Upstream summary: Cross-site scripting (XSS) vulnerability in www/make_subset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name […]
🟡 Medium ⏱ 10–30 min Last verified: 24 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866 CVE-2020-13999 Upstream summary: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2). Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-011 Related CVEs: CVE-2021-28544 CVE-2022-24070 Upstream summary: A flaw was found in Subversion. When using path-based authorization (authz), the helper function detect_changed() does not omit potentially sensitive information from log […]
🟡 Medium ⏱ 10–30 min Last verified: 24 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0275 CVE-2013-1770 CVE-2013-6395 CVE-2015-6816 CVE-2019-20378 CVE-2019-20379 CVE-2024-52762 CVE-2024-52763 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2023-009 Related CVEs: CVE-2022-48425 CVE-2023-2124 CVE-2023-32233 CVE-2023-1077 CVE-2023-1611 CVE-2023-28466 Upstream summary: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before […]
