🟢 Low ⏱ 5–15 min Last verified: 9 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0806 Upstream summary: wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7679-1 Related CVEs: CVE-2025-6965 CVE-2025-29088 CVE-2020-35525 CVE-2022-35737 CVE-2019-13734 CVE-2019-13750 CVE-2019-13751 CVE-2019-13752 +12 more Upstream summary: It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1913 Related CVEs: CVE-2025-14104 Upstream summary: The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0928-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-4038 CVE-2014-4039 Upstream summary: ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc […]
🟡 Medium ⏱ 10–30 min Last verified: 9 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7256 CVE-2024-8006 CVE-2025-11961 Upstream summary: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1412 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11233 CVE-2024-11234 +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): […]
🟡 Medium ⏱ 10–30 min Last verified: 9 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-16428 Related CVEs: CVE-2025-49133 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2025:15900 (see also SUSE bugzilla) Related CVEs: CVE-2025-9566 CVE-2019-10152 CVE-2021-20206 CVE-2022-1227 CVE-2022-21698 CVE-2024-11218 CVE-2024-1753 CVE-2024-3727 +12 more Upstream summary: There's a vulnerability in podman where an attacker may use the kube play […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qt5-webengine — Use after free in Compositing Related CVEs: CVE-2023-5997 CVE-2023-6112 CVE-2023-6345 CVE-2023-6346 CVE-2023-6347 CVE-2023-6348 CVE-2023-6350 CVE-2023-6351 +12 more Upstream summary: Qt qtwebengine-chromium repo reports: Backports for 1 security bug […]
🟡 Medium ⏱ 15–45 min Last verified: 8 January 2026 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2025-33133, IBM Support Bulletin CVE: CVE-2025-33133 NVD summary: IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program […]
