🟢 Low ⏱ 5–15 min Last verified: 26 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17516 Upstream summary: scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.6.1-r0 📖 ~4 min read • Source: Alpine secdb entry — helm 3.6.1-r0 Related CVEs: CVE-2021-32690 CVE-2021-21303 Upstream summary: Alpine community repository for vv3.19 ships helm 3.6.1-r0 which addresses CVE-2021-32690. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 26 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31153 CVE-2021-31154 CVE-2021-31155 CVE-2023-46277 Upstream summary: please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.29-r0 📖 ~4 min read • Source: Alpine secdb entry — perl-convert-asn1 0.29-r0 Related CVEs: CVE-2013-7488 Upstream summary: Alpine main repository for vv3.18 ships perl-convert-asn1 0.29-r0 which addresses CVE-2013-7488. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 26 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0468 Related CVEs: CVE-2023-4001 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 26 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-9051 Related CVEs: CVE-2024-9676 CVE-2024-9407 CVE-2024-9675 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2926 Related CVEs: CVE-2024-6174 CVE-2023-1786 CVE-2021-3429 CVE-2019-0816 CVE-2018-10896 CVE-2020-8631 CVE-2020-8632 Upstream summary: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5303 CVE-2021-26929 Upstream summary: Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edition before 5.2.16 allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-4155 CVE-2015-4156 Upstream summary: GNU Parallel before 20150422, when using (1) –pipe, (2) –tmux, (3) –cat, (4) –fifo, or (5) –compress, allows local users to write to arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1051 CVE-2004-1689 CVE-2005-1119 CVE-2005-1993 CVE-2005-2959 CVE-2005-4158 CVE-2005-4890 CVE-2006-0151 +12 more Upstream summary: sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables […]
