🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.17.1-r0 📖 ~4 min read • Source: Alpine secdb entry — aardvark-dns 1.17.1-r0 Related CVEs: CVE-2026-35406 CVE-2024-8418 Upstream summary: Alpine community repository for vedge ships aardvark-dns 1.17.1-r0 which addresses CVE-2026-35406. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 8 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19886 CVE-2019-25043 CVE-2020-15598 CVE-2021-42717 CVE-2022-48279 CVE-2023-38285 CVE-2024-1019 CVE-2026-30923 +1 more Upstream summary: Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-3827 CVE-2019-12448 CVE-2019-12447 CVE-2019-12449 CVE-2019-12795 CVE-2026-28295 CVE-2026-28296 Upstream summary: pkgsrc audit-packages flagged gvfs<1.39.4 for vulnerability class 'arbitrary-file-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-3827 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 8 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-41051 Upstream summary: In a typical Virtual Machine Monitor (VMM) there are several components, such as boot loader, virtual device drivers, virtio backend drivers and vhost drivers, that need […]
🟢 Low ⏱ 5–15 min Last verified: 8 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6684 CVE-2023-31606 Upstream summary: Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-32711 Upstream summary: pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a […]
🟡 Medium ⏱ 10–30 min Last verified: 8 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1000 CVE-2009-4013 CVE-2009-4014 CVE-2009-4015 CVE-2013-1429 CVE-2017-8829 Upstream summary: lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:2410 Related CVEs: CVE-2026-1761 CVE-2026-0719 CVE-2025-14523 CVE-2026-4271 CVE-2026-5119 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 8 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-33635 Upstream summary: iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545. Starting in version 2.0.0 and prior to version […]
🟢 Low ⏱ 5–15 min Last verified: 8 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-27187 Upstream summary: An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-Bus is not […]
