🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 9.54-r1 📖 ~4 min read • Source: Alpine secdb entry — vorbis-tools 9.54-r1 Related CVEs: CVE-2023-43361 Upstream summary: Alpine community repository for vv3.19 ships vorbis-tools 9.54-r1 which addresses CVE-2023-43361. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0107 CVE-2004-0108 CVE-2018-19416 CVE-2018-19517 CVE-2019-16167 CVE-2019-19725 CVE-2022-39377 CVE-2023-33204 Upstream summary: The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0 📖 ~4 min read • Source: Alpine secdb entry — hermes 0 Related CVEs: CVE-2020-1914 CVE-2020-1915 Upstream summary: Alpine community repository for vv3.19 ships hermes 0 which addresses CVE-2020-1914. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 23 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-46998 Upstream summary: Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), […]
🟢 Low ⏱ 5–15 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1002200 Upstream summary: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.4.1-r0 📖 ~4 min read • Source: Alpine secdb entry — ffmpeg4 4.4.1-r0 Related CVEs: CVE-2020-20446 CVE-2020-20453 CVE-2020-22015 CVE-2020-22019 CVE-2020-22021 CVE-2020-22037 CVE-2021-38114 CVE-2021-38171 +12 more Upstream summary: Alpine community repository for vv3.19 ships ffmpeg4 4.4.1-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1782 CVE-2016-0787 CVE-2019-13115 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 +7 more Upstream summary: The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 9.31-r0 📖 ~4 min read • Source: Alpine secdb entry — rxvt-unicode 9.31-r0 Related CVEs: CVE-2022-4170 CVE-2021-33477 Upstream summary: Alpine community repository for vv3.18 ships rxvt-unicode 9.31-r0 which addresses CVE-2022-4170. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 23 February 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 23 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6408-1 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into […]
