🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-662 Related CVEs: CVE-2024-34069 CVE-2023-25577 CVE-2023-23934 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2653 Upstream summary: arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2570-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-38497 Upstream summary: Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, […]
🟡 Medium ⏱ 10–30 min Last verified: 11 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0002 CVE-2007-1466 CVE-2012-2149 CVE-2017-14226 CVE-2018-19208 Upstream summary: Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-44273 Upstream summary: e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-3461 Upstream summary: Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-43646 Upstream summary: get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to […]
🟠 High ⏱ 15–60 min Last verified: 11 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2098 CVE-2018-11771 CVE-2018-1324 CVE-2019-12402 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 +3 more Upstream summary: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.40.4-r1 📖 ~4 min read • Source: Alpine secdb entry — prometheus 2.40.4-r1 Related CVEs: CVE-2022-46146 CVE-2021-29622 Upstream summary: Alpine community repository for vv3.19 ships prometheus 2.40.4-r1 which addresses CVE-2022-46146. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7437-1 Related CVEs: CVE-2022-1325 CVE-2024-26540 Upstream summary: It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could possibly use […]
