🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-58266 Upstream summary: The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. Table of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.9.0-r1 📖 ~4 min read • Source: Alpine secdb entry — libssh2 1.9.0-r1 Related CVEs: CVE-2019-17498 CVE-2019-13115 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 +4 more Upstream summary: Alpine main repository for vv3.19 ships libssh2 1.9.0-r1 which […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-47480 Upstream summary: An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-32637 Upstream summary: GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3502-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6462 Upstream summary: An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17528 Upstream summary: backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.3.19-r2 📖 ~4 min read • Source: Alpine secdb entry — hivex 1.3.19-r2 Related CVEs: CVE-2021-3504 Upstream summary: Alpine community repository for vv3.18 ships hivex 1.3.19-r2 which addresses CVE-2021-3504. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-1828 Related CVEs: CVE-2024-21068 CVE-2024-21012 CVE-2024-21011 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.1.28-r0 📖 ~4 min read • Source: Alpine secdb entry — cyrus-sasl 2.1.28-r0 Related CVEs: CVE-2022-24407 CVE-2019-19906 CVE-2013-4122 CVE-2020-8032 Upstream summary: Alpine main repository for vv3.18 ships cyrus-sasl 2.1.28-r0 which addresses CVE-2022-24407. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0141 Related CVEs: CVE-2023-5455 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
