Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALINUX2-SA-2024:0021: plexus-archiver security update (Important)
CVEs:CVE-2023-37460
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| plexus-archiver | affected | Alibaba Cloud | plexus-archiver | — |
ALINUX2-SA-2024:0028: tigervnc security update (Important)
CVEs:CVE-2023-6377CVE-2023-6478CVE-2023-6816CVE-2024-0229CVE-2024-21885CVE-2024-21886CVE-2024-31080CVE-2024-31081CVE-2024-31083
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tigervnc | affected | Alibaba Cloud | tigervnc | — |
ALINUX2-SA-2024:0018: ipa security update (Important)
CVEs:CVE-2024-3183
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ipa | affected | Alibaba Cloud | ipa | — |
ALINUX2-SA-2024:0026: 389-ds-base security update (Important)
CVEs:CVE-2024-2199CVE-2024-3657
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Alibaba Cloud | 389-ds-base | — |
ALINUX2-SA-2024:0022: libreoffice security fix update (Important)
CVEs:CVE-2023-6185
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libreoffice | affected | Alibaba Cloud | libreoffice | — |
ALINUX2-SA-2024:0029: bind bind-dyndb-ldap security update (Important)
CVEs:CVE-2023-2828CVE-2023-3341CVE-2023-4408CVE-2023-50387CVE-2023-50868
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Alibaba Cloud | bind | — |
| bind-dyndb-ldap | affected | Alibaba Cloud | bind-dyndb-ldap | — |
ALINUX2-SA-2024:0030: python security update (Important)
CVEs:CVE-2023-24329CVE-2023-40217
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python | affected | Alibaba Cloud | python | — |
ALINUX2-SA-2024:0020: java-1.8.0-openjdk security update (Important)
CVEs:CVE-2024-21131CVE-2024-21138CVE-2024-21140CVE-2024-21144CVE-2024-21145CVE-2024-21147
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Alibaba Cloud | java-1.8.0-openjdk | — |
ALINUX2-SA-2024:0025: less security update (Important)
CVEs:CVE-2024-32487
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| less | affected | Alibaba Cloud | less | — |
ALINUX2-SA-2024:0023: flatpak security update (Important)
CVEs:CVE-2024-32462
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| flatpak | affected | Alibaba Cloud | flatpak | — |
ALINUX2-SA-2024:0019: libndp security update (Important)
CVEs:CVE-2024-5564
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libndp | affected | Alibaba Cloud | libndp | — |
ALINUX2-SA-2024:0027: pki-core security update (Important)
CVEs:CVE-2023-4727
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| pki-core | affected | Alibaba Cloud | pki-core | — |
ALINUX2-SA-2024:0024: linux-firmware security update (Important)
CVEs:CVE-2022-27635CVE-2022-36351CVE-2022-38076CVE-2022-40964CVE-2022-46329
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| linux-firmware | affected | Alibaba Cloud | linux-firmware | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.