🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19550 Related CVEs: CVE-2026-32280 CVE-2026-32282 CVE-2026-32283 CVE-2026-33810 CVE-2026-25679 CVE-2026-27137 CVE-2025-61726 CVE-2025-68121 +1 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5718 Upstream summary: vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3484 CVE-2015-1817 CVE-2016-8859 CVE-2017-15650 CVE-2019-14697 CVE-2020-28928 CVE-2025-26519 CVE-2026-40200 +1 more Upstream summary: Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8198-1 Related CVEs: CVE-2026-31958 CVE-2026-35536 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2023-28370 Upstream summary: It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8019-1 Related CVEs: CVE-2026-1767 CVE-2026-1764 CVE-2026-1766 CVE-2026-1765 CVE-2023-5557 Upstream summary: Fatih Çelik discovered that tracker-miners incorrectly handled certain malformed MP3 files. An attacker could use this issue to cause tracker-miners […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-14009 CVE-2026-0848 CVE-2019-14751 CVE-2026-0846 CVE-2026-0847 CVE-2021-3828 CVE-2021-43854 CVE-2021-3842 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-nltk<3.9.3 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-14009 Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7485-1 Related CVEs: CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964 Upstream summary: It was discovered that LibRaw could be made to read out of bounds. An attacker could possibly use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 30 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0491-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-26937 CVE-2025-46802 CVE-2017-5618 Upstream summary: encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03028-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-50817 Upstream summary: A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. […]
🟠 High ⏱ 15–60 min Last verified: 30 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-19588 Upstream summary: The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This […]
