🟡 Medium ⏱ 10–30 min Last verified: 26 June 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:10631 Related CVEs: CVE-2025-5024 Upstream summary: GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fix(es): * gnome-remote-desktop: Uncontrolled Resource Consumption due to […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0297-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0377 Upstream summary: HashiCorp's go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0139-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50471 CVE-2023-50472 CVE-2024-31755 Upstream summary: cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9092 (see also SUSE bugzilla) Related CVEs: CVE-2024-32658 CVE-2024-32659 CVE-2024-32039 CVE-2024-32460 CVE-2024-22211 CVE-2024-32660 CVE-2024-32661 CVE-2024-32040 +12 more Upstream summary: FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based […]
🟠 High ⏱ 15–60 min Last verified: 26 June 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3029-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-29450 CVE-2021-27927 CVE-2024-42333 CVE-2024-22119 CVE-2022-43515 CVE-2022-35230 CVE-2022-24349 CVE-2013-7484 +7 more Upstream summary: JavaScript pre-processing can be used by the attacker to gain access to the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2023:5998 Related CVEs: CVE-2023-40217 CVE-2024-11168 CVE-2024-5642 CVE-2024-9287 CVE-2025-0938 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 +10 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3102 Related CVEs: CVE-2025-12385 CVE-2024-39936 CVE-2023-37369 CVE-2020-17507 CVE-2023-51714 CVE-2022-25634 CVE-2023-38197 CVE-2023-32762 +10 more Upstream summary: Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14521-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-11233 CVE-2023-3823 CVE-2023-3824 CVE-2024-11234 CVE-2024-8929 CVE-2024-8925 CVE-2024-8927 CVE-2024-9026 +4 more Upstream summary: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, […]
How to Configure COM+ Application Server on Windows Server 2025 COM+ (Component Object Model Plus) is the Windows middleware layer that provides enterprise services — object pooling, distributed transactions, role-based security, and loosely coupled events — to COM components running on Windows Server. COM+ sits between IIS/application code and the raw Windows API, offering the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202509-05 Related CVEs: CVE-2025-34158 Upstream summary: A vulnerability has been discovered in glibc. Please review the CVE identifier referenced below for details. Table of contents Symptom & Impact Environment & Reproduction Root […]
