🟡 Medium ⏱ 15–45 min Last verified: 17 March 2026 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2026-2485, IBM Support Bulletin CVE: CVE-2026-2485 NVD summary: IBM Infosphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:6300 Related CVEs: CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923 CVE-2026-3082 CVE-2026-3083 CVE-2026-3085 CVE-2025-3887 +8 more Upstream summary: GStreamer is a streaming media framework based on graphs of filters which operate on media data. The […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-Horde_Image — DoS vulnerability Related CVEs: CVE-2017-9773 CVE-2017-9774 Upstream summary: Michael J Rubinsky reports: The second vulnerability (CVE-2017-9773) is a DOS vulnerability. This only affects Horde installations that do not […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: findutils — GNU locate heap buffer overrun Related CVEs: CVE-2007-2452 Upstream summary: James Youngman reports: When GNU locate reads filenames from an old-format locate database, they are read into a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1154 Related CVEs: CVE-2025-7425 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796 CVE-2025-6021 CVE-2017-9047 CVE-2024-56171 CVE-2025-24928 +12 more Upstream summary: A flaw was found in libxslt where the attribute type, atype, flags are modified in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2026-144 Related CVEs: CVE-2026-43284 CVE-2026-31431 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wzdftpd — remote DoS Upstream summary: wzdftpd contains a potential remote Denial-of-Service. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟠 High ⏱ 15–60 min Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libsndfile — out-of-bounds reads Related CVEs: CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-17456 CVE-2017-17457 CVE-2017-6892 CVE-2017-7585 +7 more Upstream summary: Xin-Jiang on Github reports: CVE-2017-14245 (Medium): An out of bounds read in […]
🟠 High ⏱ 15–60 min Last verified: 17 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208 +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]
