🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6354 CVE-2007-6355 CVE-2007-6356 CVE-2023-50671 CVE-2024-42851 Upstream summary: Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5055515 • MSRC update-guide entry Related CVEs: CVE-2025-27737 Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5200 CVE-2024-25442 CVE-2024-25443 CVE-2024-25445 CVE-2024-25446 Upstream summary: hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-1860 Upstream summary: Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0771 Upstream summary: Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14972-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-31492 CVE-2024-24814 CVE-2022-23527 CVE-2019-14857 CVE-2021-32785 CVE-2021-32786 Upstream summary: mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7661-1 Related CVEs: CVE-2025-43970 CVE-2023-46565 CVE-2025-43973 CVE-2025-43971 CVE-2025-43972 Upstream summary: It was discovered that GoBGP did not properly manage memory under certain circumstances, which could lead to a buffer overflow. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2025:17428 (see also SUSE bugzilla) Related CVEs: CVE-2025-41244 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2022-31676 CVE-2025-22247 CVE-2023-20867 CVE-2015-5191 Upstream summary: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:21195-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0840 CVE-2025-11083 CVE-2025-11412 CVE-2025-11413 CVE-2025-11414 CVE-2025-1149 CVE-2025-1176 CVE-2025-1178 +12 more Upstream summary: A vulnerability, which was classified as problematic, was found in GNU Binutils up […]
