🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2018-1077 Related CVEs: CVE-2018-14354 CVE-2018-14357 CVE-2018-14362 CVE-2023-4874 CVE-2023-4875 CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 +3 more Upstream summary: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202101-22 Related CVEs: CVE-2020-14339 CVE-2019-10161 CVE-2019-10166 CVE-2019-10167 CVE-2019-10168 CVE-2023-2700 CVE-2023-3750 CVE-2024-2494 +4 more Upstream summary: A file descriptor for /dev/mapper/control was insufficiently protected. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8326 Upstream summary: The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202105-38 Related CVEs: CVE-2021-23017 CVE-2024-7347 CVE-2024-24989 CVE-2024-24990 Upstream summary: It was discovered that nginx did not properly handle DNS responses when “resolver” directive is used. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1990-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0090 Upstream summary: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4931 Upstream summary: gpw generates shorter passwords than required Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21704 Upstream summary: log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 70.3.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-setuptools 70.3.0-r0 Related CVEs: CVE-2024-6345 Upstream summary: Alpine main repository for vv3.19 ships py3-setuptools 70.3.0-r0 which addresses CVE-2024-6345. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2659 CVE-2005-2930 CVE-2005-3318 CVE-2006-3178 CVE-2007-0619 Upstream summary: Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4739 Upstream summary: reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file […]
