🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3385-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33546 Upstream summary: Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-42576 Upstream summary: The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4950 Upstream summary: gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.0.7-r1 📖 ~4 min read • Source: Alpine secdb entry — fribidi 1.0.7-r1 Related CVEs: CVE-2019-18397 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: Alpine main repository for vv3.19 ships fribidi 1.0.7-r1 which addresses CVE-2019-18397. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2013 CVE-2013-2104 CVE-2013-2166 CVE-2013-2167 CVE-2014-0105 CVE-2014-7144 CVE-2015-1852 Upstream summary: The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the –password argument, which allows local users […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10061 Upstream summary: utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-5298 Related CVEs: CVE-2024-36472 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12854 Related CVEs: CVE-2023-4911 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202402-28 Related CVEs: CVE-2018-14628 CVE-2022-2127 CVE-2023-3347 CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-34966 CVE-2023-34967 +12 more Upstream summary: Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8135-1 Related CVEs: CVE-2023-50447 CVE-2021-28675 CVE-2021-25290 CVE-2021-25288 CVE-2021-28676 CVE-2023-44271 CVE-2021-28677 CVE-2021-25287 +12 more Upstream summary: It was discovered that Pillow did not correctly handle reading J2K files, which could lead […]
