🟠 High ⏱ 15–60 min Last verified: 1 May 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-12264 Related CVEs: CVE-2023-39326 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🔴 Critical ⏱ 15–90 min Last verified: 1 May 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:1830-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013 CVE-2020-36331 CVE-2023-4863 CVE-2023-1999 +3 more Upstream summary: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in […]
Laravel ist ein Open-Source-PHP-Framework, das einen Satz von Tools und Ressourcen zur Entwicklung moderner PHP-Anwendungen bereitstellt. Dank eines umfassenden Ökosystems, das auf seine integrierten Funktionen…
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9517 Related CVEs: CVE-2011-10007 Upstream summary: File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories. Security Fix(es): * perl-file-find-rule: File::Find::Rule Arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 30 April 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000420 CVE-2021-21404 CVE-2022-46165 Upstream summary: Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-41334 Upstream summary: Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6753-1 Related CVEs: CVE-2023-46233 Upstream summary: Thomas Neil James Shadwell discovered that CryptoJS was using an insecure cryptographic default configuration. A remote attacker could possibly use this issue to expose […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5870-1 Related CVEs: CVE-2022-25147 Upstream summary: Ronald Crane discovered that APR-util did not properly handled memory when encoding or decoding certain input data. An attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 30 April 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6690-1 Related CVEs: CVE-2023-3966 CVE-2023-5366 CVE-2023-1668 CVE-2022-4337 CVE-2022-4338 Upstream summary: Timothy Redaelli and Haresh Khandelwal discovered that Open vSwitch incorrectly handled certain crafted Geneve packets when hardware offloading via the […]
🟡 Medium ⏱ 10–30 min Last verified: 30 April 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:158-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40898 Upstream summary: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via […]
