January 2026 - Page 106 of 142

SLES 16 — dom4j — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — dom4j — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:1382-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-10683 CVE-2018-1000632 Upstream summary: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, […]

Read more
NetBSD 10.0 — poppler-utils — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — poppler-utils — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-7511 CVE-2017-9775 CVE-2017-9776 CVE-2018-10768 CVE-2017-7515 CVE-2020-27778 CVE-2025-50420 Upstream summary: pkgsrc audit-packages flagged poppler-utils<0.24.3 for vulnerability class 'format-string'. Reference: http://secunia.com/advisories/55258/ Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Windows Server 2025 — KB5061026 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2025

Windows Server 2025 — KB5061026 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5061026 • MSRC update-guide entry Related CVEs: CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32724 CVE-2025-33064 CVE-2025-33066 CVE-2025-33075 CVE-2025-33053  +3 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows Win32K – GRFX […]

Read more
Windows Server 2025 — KB5049983 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2025

Windows Server 2025 — KB5049983 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5049983 • MSRC update-guide entry Related CVEs: CVE-2025-21294 CVE-2025-21295 CVE-2025-21296 CVE-2025-21297 CVE-2025-21298 CVE-2025-21309 CVE-2025-21307 CVE-2024-49120  +12 more Affected components: Windows Server 2025 Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
AlmaLinux 8 — pam — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — pam — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:14557 Related CVEs: CVE-2025-6020 CVE-2025-8941 CVE-2024-10041 CVE-2024-10963 CVE-2024-22365 Upstream summary: Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security […]

Read more
Windows Server 2019 — KB5065435 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2019

Windows Server 2019 — KB5065435 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5065435 • MSRC update-guide entry Related CVEs: CVE-2025-54107 CVE-2025-54917 Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to […]

Read more
Windows Server 2016 — KB5066742 — security update — patch and remediation guide — diagnosis and fix on Windows Server 2016

Windows Server 2016 — KB5066742 — security update — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read  •  Source: Microsoft KB5066742 • MSRC update-guide entry Related CVEs: CVE-2025-55248 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 Microsoft summary: Inadequate encryption strength in .NET.NET Framework, Visual Studio allows an […]

Read more
FreeBSD 15 — php55-mbstring — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php55-mbstring — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772  +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]

Read more
FreeBSD 15 — php5-imap — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php5-imap — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-imap — Denial of Service Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001  +1 more Upstream summary: The following DoS condition in IMAP extension was fixed in PHP […]

Read more
FreeBSD 15 — kdegraphics — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — kdegraphics — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpdf — multiple remote Stream.CC vulnerabilities Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 CVE-2005-2097 CVE-2006-0301 CVE-2007-3387 CVE-2007-4352  +2 more Upstream summary: Secunia Research reports: Secunia Research has discovered some vulnerabilities in […]

Read more
CHAT