🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10362 CVE-2021-46709 Upstream summary: An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with '==' instead of '===' in classes/Authorization.php for the user-provided login […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1691 Upstream summary: The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0007 CVE-2010-3999 Upstream summary: gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6761-1 Related CVEs: CVE-2024-30187 Upstream summary: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:6482 Related CVEs: CVE-2023-35789 Upstream summary: The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4438-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40359 Upstream summary: xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka […]
🟠 High ⏱ 15–60 min Last verified: 16 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-38528 CVE-2022-45748 CVE-2024-40724 CVE-2024-45679 CVE-2024-46632 CVE-2024-48423 CVE-2024-48424 CVE-2024-48425 +12 more Upstream summary: Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0 📖 ~4 min read • Source: Alpine secdb entry — hermes 0 Related CVEs: CVE-2020-1914 CVE-2020-1915 Upstream summary: Alpine community repository for vv3.18 ships hermes 0 which addresses CVE-2020-1914. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202312-08 Related CVEs: CVE-2023-1729 CVE-2020-24889 CVE-2020-24890 CVE-2020-24870 Upstream summary: A vulnerability has been discovered in LibRaw. Please review the CVE identifier referenced below for details. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36328 Upstream summary: Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). Table […]
