🟢 Low ⏱ 5–15 min Last verified: 9 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21897 Upstream summary: A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An […]
🟠 High ⏱ 15–60 min Last verified: 9 April 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12435 CVE-2018-20187 CVE-2018-9127 CVE-2018-9860 CVE-2021-24115 CVE-2021-40529 CVE-2022-43705 CVE-2024-34702 +7 more Upstream summary: Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the […]
🟡 Medium ⏱ 10–30 min Last verified: 9 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4434 CVE-2012-4435 CVE-2012-4436 Upstream summary: fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000426 Upstream summary: MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.19.0-r0 📖 ~4 min read • Source: Alpine secdb entry — sddm 0.19.0-r0 Related CVEs: CVE-2020-28049 Upstream summary: Alpine community repository for vv3.19 ships sddm 0.19.0-r0 which addresses CVE-2020-28049. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 9 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6731-1 Related CVEs: CVE-2017-17042 CVE-2019-1020001 CVE-2024-27285 Upstream summary: It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.6.23-r0 📖 ~4 min read • Source: Alpine secdb entry — libexif 0.6.23-r0 Related CVEs: CVE-2020-0198 CVE-2020-0452 CVE-2018-20030 CVE-2020-13114 CVE-2020-13113 CVE-2020-13112 CVE-2020-0093 CVE-2019-9278 +12 more Upstream summary: Alpine community repository for vv3.19 ships libexif 0.6.23-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7870-1 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8247-1 Related CVEs: CVE-2023-27476 Upstream summary: It was discovered that OWSLib did not properly disable entity resolution within its XML parser. An attacker could possibly use this issue to read […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2105-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17507 CVE-2024-29158 CVE-2024-29161 CVE-2024-29166 CVE-2024-32608 CVE-2024-32610 CVE-2024-32614 CVE-2024-32619 +6 more Upstream summary: In HDF5 1.10.1, there is an out of bounds read vulnerability in […]
