🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-080 Related CVEs: CVE-2022-31212 CVE-2022-31213 Upstream summary: An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1386 Upstream summary: Directory traversal vulnerability in unshield 1.0-1. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1812 CVE-2019-11027 Upstream summary: The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.8.0-r0 📖 ~4 min read • Source: Alpine secdb entry — kubo 0.8.0-r0 Related CVEs: CVE-2020-26279 CVE-2020-26283 Upstream summary: Alpine community repository for vv3.19 ships kubo 0.8.0-r0 which addresses CVE-2020-26279. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5371 Upstream summary: screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-12762 Upstream summary: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.4.6-r0 📖 ~4 min read • Source: Alpine secdb entry — xapian-core 1.4.6-r0 Related CVEs: CVE-2018-0499 Upstream summary: Alpine community repository for vv3.18 ships xapian-core 1.4.6-r0 which addresses CVE-2018-0499. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10870 Upstream summary: Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other users from being […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19847 Upstream summary: Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6423-1 Related CVEs: CVE-2023-43641 Upstream summary: It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. […]
