🟢 Low ⏱ 5–15 min Last verified: 2 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28589 Upstream summary: An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7343-1 Related CVEs: CVE-2024-56201 CVE-2024-56326 CVE-2025-27516 CVE-2024-34064 CVE-2020-28493 CVE-2024-22195 CVE-2016-10745 CVE-2019-10906 Upstream summary: Rafal Krupinski discovered that Jinja2 did not properly restrict the execution of code in situations where templates […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8195-3 Related CVEs: CVE-2026-41651 CVE-2020-16121 CVE-2020-16122 Upstream summary: USN-8195-1 fixed a vulnerability in PackageKit. This update provides the corresponding fix to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.0.8-r2 📖 ~4 min read • Source: Alpine secdb entry — libde265 1.0.8-r2 Related CVEs: CVE-2021-35452 CVE-2021-36408 CVE-2021-36410 CVE-2021-36411 CVE-2022-1253 CVE-2026-33165 CVE-2026-33164 CVE-2023-49465 +12 more Upstream summary: Alpine main repository for vedge ships libde265 1.0.8-r2 which […]
🟢 Low ⏱ 5–15 min Last verified: 2 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8115-1 Related CVEs: CVE-2026-27459 CVE-2026-27448 Upstream summary: It was discovered that pyOpenSSL incorrectly handled exceptions in the tlsext_servername callback. This could result in connections being accepted after an exception, contrary […]
🟢 Low ⏱ 5–15 min Last verified: 2 April 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7976-1 Related CVEs: CVE-2025-7783 Upstream summary: Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1989-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 Upstream summary: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:12423 Related CVEs: CVE-2026-4878 Upstream summary: Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:2211-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
