🟢 Low ⏱ 5–15 min Last verified: 31 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25638 Upstream summary: A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can […]
🟢 Low ⏱ 5–15 min Last verified: 31 December 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6800-1 Related CVEs: CVE-2023-46234 Upstream summary: It was discovered that browserify-sign incorrectly handled an upper bound check in signature verification. If a user or an automated system were tricked into […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.1.8-r0 📖 ~4 min read • Source: Alpine secdb entry — apptainer 1.1.8-r0 Related CVEs: CVE-2023-30549 CVE-2022-23538 CVE-2022-39237 Upstream summary: Alpine community repository for vv3.19 ships apptainer 1.1.8-r0 which addresses CVE-2023-30549. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 31 December 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6708-1 Related CVEs: CVE-2023-46045 CVE-2018-10196 CVE-2019-11023 CVE-2020-18032 CVE-2014-9157 Upstream summary: It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this issue to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.9-r1 📖 ~4 min read • Source: Alpine secdb entry — lcms2 2.9-r1 Related CVEs: CVE-2018-16435 CVE-2016-10165 Upstream summary: Alpine main repository for vv3.18 ships lcms2 2.9-r1 which addresses CVE-2018-16435. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 31 December 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9423 Related CVEs: CVE-2023-29483 Upstream summary: The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 6.0.6-r5 📖 ~4 min read • Source: Alpine secdb entry — hylafax 6.0.6-r5 Related CVEs: CVE-2018-17141 Upstream summary: Alpine main repository for vv3.18 ships hylafax 6.0.6-r5 which addresses CVE-2018-17141. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 31 December 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7508 Related CVEs: CVE-2023-6205 CVE-2023-6209 CVE-2023-6207 CVE-2023-6212 CVE-2023-6206 CVE-2023-6204 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2632-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-49990 CVE-2023-49991 CVE-2023-49992 CVE-2023-49993 CVE-2023-49994 Upstream summary: Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 5.9.3-r2 📖 ~4 min read • Source: Alpine secdb entry — net-snmp 5.9.3-r2 Related CVEs: CVE-2015-8100 CVE-2022-44792 CVE-2022-44793 CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 +1 more Upstream summary: Alpine main repository for vv3.18 ships net-snmp 5.9.3-r2 which […]
