🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.4.15-r9 📖 ~4 min read • Source: Alpine secdb entry — libproxy 0.4.15-r9 Related CVEs: CVE-2020-26154 CVE-2020-25219 Upstream summary: Alpine community repository for vv3.19 ships libproxy 0.4.15-r9 which addresses CVE-2020-26154. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 24 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2942 CVE-2008-4297 CVE-2010-4237 CVE-2014-9390 CVE-2014-9462 CVE-2016-3068 CVE-2016-3069 CVE-2016-3105 +12 more Upstream summary: Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 5.1.2-r0 📖 ~4 min read • Source: Alpine secdb entry — phpmyadmin 5.1.2-r0 Related CVEs: CVE-2022-23807 CVE-2022-23808 CVE-2020-10802 CVE-2020-10803 CVE-2020-10804 CVE-2020-5504 CVE-2019-18622 CVE-2019-19617 +12 more Upstream summary: Alpine community repository for vv3.19 ships phpmyadmin 5.1.2-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15612 CVE-2017-16876 CVE-2022-34749 Upstream summary: mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10689 Upstream summary: blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7077-1 Related CVEs: CVE-2023-31315 CVE-2023-20569 CVE-2023-20593 CVE-2017-5715 Upstream summary: Enrique Nissim and Krzysztof Okupski discovered that some AMD processors did not properly restrict access to the System Management Mode (SMM) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.0.6-r7 📖 ~4 min read • Source: Alpine secdb entry — py3-rencode 1.0.6-r7 Related CVEs: CVE-2021-40839 Upstream summary: Alpine community repository for vv3.18 ships py3-rencode 1.0.6-r7 which addresses CVE-2021-40839. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 24 December 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7109-1 Related CVEs: CVE-2022-41723 CVE-2022-41724 CVE-2022-41725 CVE-2023-24531 CVE-2023-24536 CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 +12 more Upstream summary: Philippe Antoine discovered that Go incorrectly handled crafted HTTP/2 streams. An attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6574-1 Related CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39323 CVE-2023-39325 CVE-2023-39326 CVE-2023-44487 CVE-2023-45285 Upstream summary: Takeshi Kaneko discovered that Go did not properly handle comments and special tags in the script context of […]
🟠 High ⏱ 15–60 min Last verified: 24 December 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0423-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-6704 Upstream summary: Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a […]
