🟢 Low ⏱ 5–15 min Last verified: 13 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-4495 Upstream summary: The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-42906 Upstream summary: powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-7282 CVE-2019-7283 CVE-2023-38336 Upstream summary: In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.15.0-r0 📖 ~4 min read • Source: Alpine secdb entry — podman-tui 0.15.0-r0 Related CVEs: CVE-2023-48795 Upstream summary: Alpine community repository for vv3.19 ships podman-tui 0.15.0-r0 which addresses CVE-2023-48795. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0146 CVE-2003-0924 CVE-2005-2471 CVE-2005-2978 CVE-2005-3632 CVE-2005-3662 CVE-2008-0554 CVE-2009-4274 +3 more Upstream summary: Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may allow remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7040-1 Related CVEs: CVE-2023-26112 Upstream summary: It was discovered that ConfigObj contains regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a regular […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6011-1 Related CVEs: CVE-2021-31684 CVE-2023-1370 Upstream summary: It was discovered that Json-smart incorrectly handled memory when processing input containing unclosed quotes. A remote attacker could possibly use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0608 Related CVEs: CVE-2024-0747 CVE-2024-0750 CVE-2024-0753 CVE-2024-0741 CVE-2024-0742 CVE-2024-0746 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0609 Related CVEs: CVE-2024-0742 CVE-2024-0750 CVE-2024-0751 CVE-2024-0741 CVE-2024-0747 CVE-2024-0749 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.36.1-r7 📖 ~4 min read • Source: Alpine secdb entry — busybox 1.36.1-r7 Related CVEs: CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2022-48174 ALPINE-13661 CVE-2022-28391 CVE-2022-30065 +12 more Upstream summary: Alpine main repository for vv3.18 ships busybox 1.36.1-r7 which […]
