🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.3.6-r2 📖 ~4 min read • Source: Alpine secdb entry — libvorbis 1.3.6-r2 Related CVEs: CVE-2018-10393 CVE-2018-10392 CVE-2018-5146 CVE-2017-14632 CVE-2017-14633 CVE-2017-14160 Upstream summary: Alpine main repository for vv3.18 ships libvorbis 1.3.6-r2 which addresses CVE-2018-10393. Table of […]
🟠 High ⏱ 15–60 min Last verified: 20 May 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2026-50145 Related CVEs: CVE-2024-26655 CVE-2024-36903 CVE-2024-36927 CVE-2024-40928 CVE-2024-46830 CVE-2024-49968 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2704 Upstream summary: realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8861 CVE-2015-8862 Upstream summary: The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-3008 Upstream summary: The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-127 Related CVEs: CVE-2022-4379 CVE-2023-32233 CVE-2023-1077 CVE-2023-28466 CVE-2023-1078 CVE-2023-26545 Upstream summary: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24884 Upstream summary: ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2383 Related CVEs: CVE-2023-48948 CVE-2023-48949 CVE-2023-48951 CVE-2023-48952 CVE-2024-57635 CVE-2024-57636 CVE-2024-57637 CVE-2024-57638 +12 more Upstream summary: An issue in the box_div function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3896 CVE-2023-4949 Upstream summary: Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35678 Upstream summary: Autobahn|Python before 20.12.3 allows redirect header injection. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
