🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-5389 CVE-2019-10155 CVE-2019-12312 CVE-2020-1763 CVE-2022-23094 CVE-2023-23009 CVE-2023-30570 CVE-2023-38710 +4 more Upstream summary: The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7258-1 Related CVEs: CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 CVE-2024-43411 CVE-2018-9861 CVE-2020-9281 CVE-2021-32808 +3 more Upstream summary: Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7474-1 Related CVEs: CVE-2023-28840 CVE-2023-28841 CVE-2023-28842 CVE-2024-23651 CVE-2024-23652 CVE-2024-36621 CVE-2024-36623 CVE-2024-41110 +4 more Upstream summary: Cory Snider discovered that Docker incorrectly handled networking packet encapsulation. An attacker could use this […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.4.9-r1 📖 ~4 min read • Source: Alpine secdb entry — cups 2.4.9-r1 Related CVEs: CVE-2024-47175 CVE-2024-35235 CVE-2023-4504 CVE-2023-32324 CVE-2022-26691 CVE-2020-3898 CVE-2019-8842 CVE-2019-8696 +2 more Upstream summary: Alpine main repository for vv3.19 ships cups 2.4.9-r1 which […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6580-1 Related CVEs: CVE-2023-4255 CVE-2022-38223 CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 +12 more Upstream summary: It was discovered that w3m incorrectly handled certain HTML files. An attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-49295 CVE-2022-46165 Upstream summary: quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-1872 Related CVEs: CVE-2024-27316 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.9.0-r1 📖 ~4 min read • Source: Alpine secdb entry — libssh2 1.9.0-r1 Related CVEs: CVE-2019-17498 CVE-2019-13115 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 +4 more Upstream summary: Alpine main repository for vv3.18 ships libssh2 1.9.0-r1 which […]
🟠 High ⏱ 15–60 min Last verified: 26 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-6265 Related CVEs: CVE-2023-43115 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0258-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-7971 CVE-2024-6772 CVE-2024-6773 CVE-2024-6774 CVE-2024-6775 CVE-2024-6776 CVE-2024-6777 CVE-2024-6778 +12 more Upstream summary: Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a […]
