🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1141 CVE-2005-1142 CVE-2021-33479 CVE-2021-33480 CVE-2021-33481 Upstream summary: Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3024 CVE-2010-4334 Upstream summary: The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0635 CVE-2018-20374 CVE-2018-20375 CVE-2018-20376 CVE-2019-12495 CVE-2019-9754 Upstream summary: Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5037033 • MSRC update-guide entry Related CVEs: CVE-2024-21409 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21288 CVE-2021-21305 CVE-2023-49090 Upstream summary: CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-20346 CVE-2018-20506 CVE-2019-5018 CVE-2019-19244 CVE-2020-11656 CVE-2020-13871 CVE-2015-3416 CVE-2017-10989 +12 more Upstream summary: pkgsrc audit-packages flagged sqlite3<3.25.3 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-20346 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16884 Upstream summary: runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.5.0-r0 📖 ~4 min read • Source: Alpine secdb entry — prometheus-node-exporter 1.5.0-r0 Related CVEs: CVE-2022-46146 Upstream summary: Alpine community repository for vv3.19 ships prometheus-node-exporter 1.5.0-r0 which addresses CVE-2022-46146. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7749 CVE-2023-46445 CVE-2023-46446 CVE-2023-48795 Upstream summary: The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5037127 • MSRC update-guide entry Related CVEs: CVE-2024-21409 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
