🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.8.1-r0 📖 ~4 min read • Source: Alpine secdb entry — expat 2.8.1-r0 Related CVEs: CVE-2026-45186 CVE-2026-41080 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-24515 CVE-2026-25210 CVE-2025-59375 +12 more Upstream summary: Alpine main repository for vedge ships expat 2.8.1-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7404 Upstream summary: OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:0853-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-15522 CVE-2026-41051 CVE-2019-15523 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-48183 CVE-2023-48184 CVE-2024-13903 CVE-2024-33263 CVE-2025-12745 CVE-2025-46687 CVE-2025-46688 CVE-2025-62490 +12 more Upstream summary: QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5667 Upstream summary: Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8096 Related CVEs: CVE-2025-40909 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8538 CVE-2015-8750 CVE-2016-2050 CVE-2016-2091 CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 +12 more Upstream summary: dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1412 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11233 CVE-2024-11234 +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-2582 Upstream summary: The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5078775 • MSRC update-guide entry Related CVEs: CVE-2026-23668 CVE-2026-23669 CVE-2026-23672 CVE-2026-23673 CVE-2026-24285 CVE-2026-24289 CVE-2026-24291 CVE-2026-24294 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Concurrent execution using shared resource […]
