🟡 Medium ⏱ 10–30 min Last verified: 13 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-0876 CVE-2012-1148 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40978 Upstream summary: The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23926 Upstream summary: The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-25058 Upstream summary: An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.30-r0 📖 ~4 min read • Source: Alpine secdb entry — faac 1.30-r0 Related CVEs: CVE-2018-19886 Upstream summary: Alpine community repository for vv3.19 ships faac 1.30-r0 which addresses CVE-2018-19886. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10774 Upstream summary: php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.99.5-r6 📖 ~4 min read • Source: Alpine secdb entry — lame 3.99.5-r6 Related CVEs: CVE-2015-9099 CVE-2015-9100 CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 CVE-2017-11720 Upstream summary: Alpine main repository for vv3.19 ships lame 3.99.5-r6 which addresses CVE-2015-9099. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 13 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7616-1 Related CVEs: CVE-2023-6378 CVE-2021-42550 Upstream summary: It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 13 January 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12196 Related CVEs: CVE-2023-23455 CVE-2022-4129 CVE-2023-23454 CVE-2023-0266 CVE-2023-23559 CVE-2023-0394 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.14.0-r0 📖 ~4 min read • Source: Alpine secdb entry — f2fs-tools 1.14.0-r0 Related CVEs: CVE-2020-6104 CVE-2020-6105 CVE-2020-6106 CVE-2020-6107 CVE-2020-6108 Upstream summary: Alpine main repository for vv3.19 ships f2fs-tools 1.14.0-r0 which addresses CVE-2020-6104. Table of contents […]
