🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.25.4-r0 📖 ~4 min read • Source: Alpine secdb entry — mongo-c-driver 1.25.4-r0 Related CVEs: CVE-2023-0437 Upstream summary: Alpine community repository for vedge ships mongo-c-driver 1.25.4-r0 which addresses CVE-2023-0437. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1235 Upstream summary: The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0963-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1580 CVE-2023-32570 Upstream summary: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2936 CVE-2009-4488 CVE-2013-4090 CVE-2013-4484 CVE-2015-8852 CVE-2017-12425 CVE-2017-8807 CVE-2019-15892 +12 more Upstream summary: The Command Line Interface (aka Server CLI or administration interface) in the master process in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2707 Related CVEs: CVE-2024-47072 CVE-2021-21342 CVE-2022-41966 CVE-2021-39139 CVE-2021-39140 CVE-2021-39141 CVE-2021-39144 CVE-2021-39145 +12 more Upstream summary: XStream is vulnerable to a Denial of Service attack due to stack overflow from a […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31800 Upstream summary: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24775 CVE-2023-29197 Upstream summary: guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in […]
🟡 Medium ⏱ 10–30 min Last verified: 6 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13863 CVE-2019-2391 CVE-2020-7610 CVE-2021-32050 Upstream summary: The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8135-1 Related CVEs: CVE-2023-50447 CVE-2021-28675 CVE-2021-25290 CVE-2021-25288 CVE-2021-28676 CVE-2023-44271 CVE-2021-28677 CVE-2021-25287 +12 more Upstream summary: It was discovered that Pillow did not correctly handle reading J2K files, which could lead […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.0.3-r0 📖 ~4 min read • Source: Alpine secdb entry — fdkaac 1.0.3-r0 Related CVEs: CVE-2022-36148 CVE-2022-37781 Upstream summary: Alpine community repository for vv3.19 ships fdkaac 1.0.3-r0 which addresses CVE-2022-36148. Table of contents Symptom & Impact […]
