🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2275 Related CVEs: CVE-2023-28736 CVE-2023-28938 Upstream summary: Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9527 CVE-2018-10191 CVE-2018-10199 CVE-2018-11743 CVE-2018-12248 CVE-2018-12249 CVE-2018-14337 CVE-2020-15866 +12 more Upstream summary: The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000418 CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 Upstream summary: The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4078 CVE-2009-4079 CVE-2009-4459 CVE-2011-4927 CVE-2011-4928 CVE-2011-4929 CVE-2012-0327 CVE-2012-2054 +12 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45707 Upstream summary: An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28282 Upstream summary: Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.2.12-r2 📖 ~4 min read • Source: Alpine secdb entry — zlib 1.2.12-r2 Related CVEs: CVE-2022-37434 CVE-2018-25032 CVE-2023-45853 CVE-2023-6992 Upstream summary: Alpine main repository for vv3.19 ships zlib 1.2.12-r2 which addresses CVE-2022-37434. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-33546 Upstream summary: Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.18.0-r0 📖 ~4 min read • Source: Alpine secdb entry — rpm 4.18.0-r0 Related CVEs: CVE-2021-35937 CVE-2021-35938 CVE-2021-35939 CVE-2021-3521 CVE-2021-3421 CVE-2021-20271 CVE-2021-20266 Upstream summary: Alpine community repository for vv3.19 ships rpm 4.18.0-r0 which addresses CVE-2021-35937. Table […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8178-1 Related CVEs: CVE-2024-7547 CVE-2024-7546 CVE-2024-7541 CVE-2024-7545 CVE-2024-7539 CVE-2024-7544 CVE-2024-7540 CVE-2024-7542 +7 more Upstream summary: It was discovered that oFono incorrectly handled crafted responses from AT commands. An attacker could […]
