🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.7.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-cairosvg 2.7.0-r0 Related CVEs: CVE-2023-27586 CVE-2021-21236 Upstream summary: Alpine community repository for vv3.19 ships py3-cairosvg 2.7.0-r0 which addresses CVE-2023-27586. Table of contents Symptom & Impact […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:4215-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-37026 CVE-2020-25623 CVE-2020-35733 CVE-2016-1000107 CVE-2025-26618 Upstream summary: In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8037 (see also SUSE bugzilla) Related CVEs: CVE-2024-42934 Upstream summary: OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-8132 Related CVEs: CVE-2025-32049 CVE-2025-4948 CVE-2025-2784 CVE-2025-32914 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5043092 • MSRC update-guide entry Related CVEs: CVE-2024-38236 CVE-2024-38249 CVE-2024-38250 CVE-2024-38256 CVE-2024-43467 CVE-2024-38014 CVE-2024-38217 CVE-2024-38231 +12 more Affected components: Windows Server 2016 (Server Core installation) Windows Server 2016 Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-5297 Related CVEs: CVE-2024-1298 CVE-2023-45236 CVE-2023-45237 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0350-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0132 CVE-2024-0133 Upstream summary: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:15971 Related CVEs: CVE-2025-14087 CVE-2025-14512 CVE-2025-13601 CVE-2024-52533 CVE-2025-4373 CVE-2024-34397 CVE-2023-29499 CVE-2023-32611 +1 more Upstream summary: GLib provides the core application building blocks for libraries and applications written in C. It provides […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:9396 Related CVEs: CVE-2025-3891 CVE-2025-31492 CVE-2024-24814 CVE-2022-23527 CVE-2023-28625 Upstream summary: The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3744-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6545 CVE-2025-6547 CVE-2024-48949 CVE-2024-48948 CVE-2025-5889 Upstream summary: Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with […]
