🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1113 Upstream summary: SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2768-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4156 Upstream summary: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.9.3-r1 📖 ~4 min read • Source: Alpine secdb entry — lz4 1.9.3-r1 Related CVEs: CVE-2021-3520 CVE-2019-17543 Upstream summary: Alpine main repository for vv3.18 ships lz4 1.9.3-r1 which addresses CVE-2021-3520. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 2 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:7867 Related CVEs: CVE-2024-43483 CVE-2024-43484 CVE-2024-43485 CVE-2024-21386 CVE-2024-21404 CVE-2024-0056 CVE-2024-0057 CVE-2024-21319 +12 more Upstream summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0423-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50255 Upstream summary: Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that […]
🔴 Critical ⏱ 15–90 min Last verified: 2 March 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7213 Related CVEs: CVE-2023-46847 CVE-2023-46846 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202409-19 Related CVEs: CVE-2024-39331 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2024-30202 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 Upstream summary: %(…) link abbreviations could specify unsafe functions. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 2 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4676 CVE-2007-6353 CVE-2008-2696 CVE-2014-9449 CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862 +12 more Upstream summary: Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 4.45.1-r0 📖 ~4 min read • Source: Alpine secdb entry — yq-go 4.45.1-r0 Related CVEs: CVE-2024-45338 Upstream summary: Alpine community repository for vedge ships yq-go 4.45.1-r0 which addresses CVE-2024-45338. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-9514 CVE-2023-26964 Upstream summary: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and […]
