🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:9693 Related CVEs: CVE-2026-22007 CVE-2026-22008 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 CVE-2026-26740 +9 more Upstream summary: The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: KeePassX — information disclosure Related CVEs: CVE-2015-8378 Upstream summary: Yves-Alexis Perez reports: Starting an export (using File / Export to / KeepassX XML file) and cancelling it leads to KeepassX […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: punbb — NULL byte injection vulnerability Related CVEs: CVE-2006-4759 Upstream summary: CVE Mitre reports: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5061195 • MSRC update-guide entry Related CVEs: CVE-2025-32709 Affected components: Windows Server 2025 Microsoft summary: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gforge — XSS and email flood vulnerabilities Related CVEs: CVE-2005-0299 CVE-2005-2430 CVE-2005-2431 Upstream summary: Jose Antonio Coret reports that GForge contains multiple Cross Site Scripting vulnerabilities and an e-mail flood […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_pagespeed — critical cross-site scripting (XSS) vulnerability Related CVEs: CVE-2012-4001 CVE-2012-4360 CVE-2013-6111 Upstream summary: mod_pagespeed developers report: Various versions of mod_pagespeed are subject to critical cross-site scripting (XSS) vulnerability, CVE-2013-6111. […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5046696 • MSRC update-guide entry Related CVEs: CVE-2024-43625 CVE-2024-43639 CVE-2024-43623 CVE-2024-43626 CVE-2024-43627 CVE-2024-43628 CVE-2024-43630 CVE-2024-43634 +12 more Affected components: Windows Server 2025 Table of contents Symptom & Impact Environment & Reproduction Root […]
