🟠 High ⏱ 15–60 min Last verified: 31 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5397 CVE-2018-11798 CVE-2019-0205 CVE-2019-0210 CVE-2020-13949 CVE-2025-48431 CVE-2026-41602 CVE-2026-41603 +8 more Upstream summary: The Apache Thrift Go client library exposed the potential during code generation for command injection due […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-56005 Upstream summary: An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19136 Related CVEs: CVE-2026-32282 CVE-2026-32283 CVE-2026-25679 CVE-2026-32280 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8244-1 Related CVEs: CVE-2026-23112 CVE-2026-23231 CVE-2026-23273 CVE-2024-36347 CVE-2025-68351 CVE-2025-68353 CVE-2025-68365 CVE-2025-68368 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8225-1 Related CVEs: CVE-2025-68480 CVE-2018-17175 Upstream summary: Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3889-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-29457 CVE-2021-31292 CVE-2025-55304 CVE-2018-11531 CVE-2018-20097 CVE-2018-20098 CVE-2019-13109 CVE-2021-29473 +12 more Upstream summary: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:4543 Related CVEs: CVE-2025-14242 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0233-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22702 Upstream summary: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1872-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-4948 CVE-2016-5410 Upstream summary: A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:1791-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12779 CVE-2023-39976 Upstream summary: libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm […]
