🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26237 Upstream summary: Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9423 (see also SUSE bugzilla) Related CVEs: CVE-2023-29483 Upstream summary: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5030217 • MSRC update-guide entry Related CVEs: CVE-2023-35355 CVE-2023-38161 CVE-2023-38149 CVE-2023-38147 CVE-2023-38144 CVE-2023-38143 CVE-2023-38142 CVE-2023-38141 +7 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10932 Upstream summary: lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 3.1.8-r0 📖 ~4 min read • Source: Alpine secdb entry — libmodbus 3.1.8-r0 Related CVEs: CVE-2022-0367 Upstream summary: Alpine community repository for vv3.20 ships libmodbus 3.1.8-r0 which addresses CVE-2022-0367. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8418 Upstream summary: RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5044097 • MSRC update-guide entry Related CVEs: CVE-2024-43483 CVE-2024-43484 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 31 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5104 Upstream summary: The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-1297 CVE-2012-4383 CVE-2014-1860 Upstream summary: pkgsrc audit-packages flagged contao211<2.11.2nb1 for vulnerability class 'cross-site-request-forgery'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1297 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 31 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7647-1 Related CVEs: CVE-2021-3693 CVE-2021-3731 CVE-2024-23831 CVE-2021-3882 CVE-2021-3694 Upstream summary: It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
