🟢 Low ⏱ 5–15 min Last verified: 25 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:23336 Related CVEs: CVE-2025-11083 Upstream summary: Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: open-vm-tools — Multiple vulnerabilities Related CVEs: CVE-2023-34058 CVE-2023-34059 Upstream summary: VMware reports: This update includes 2 security fixes: High CVE-2023-34058: SAML token signature bypass vulnerability High CVE-2023-34059: File descriptor hijack […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: binutils — Multiple vulnerabilities Related CVEs: CVE-2021-3487 CVE-2023-1972 CVE-2023-25585 CVE-2023-25586 CVE-2023-25588 Upstream summary: [email protected] reports PR/281070: A new version of devel/binutils has been released fixing CVE-2023-1972, CVE-2023-25585, CVE-2023-25586, and CVE-2023-25588. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5079466 • MSRC update-guide entry Related CVEs: CVE-2026-23669 CVE-2026-23671 CVE-2026-23672 CVE-2026-23673 CVE-2026-24283 CVE-2026-24287 CVE-2026-24289 CVE-2026-24290 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4392 CVE-2009-0858 CVE-2012-1191 Upstream summary: dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-12447 CVE-2019-12448 CVE-2019-12449 CVE-2019-12795 CVE-2019-3827 CVE-2026-28295 CVE-2026-28296 Upstream summary: An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used. […]
🟠 High ⏱ 5–30 min Last verified: 25 January 2026 Affected versions: RHEL 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
