🟠 High ⏱ 15–60 min Last verified: 18 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openexr — multiple vulnerabilities Related CVEs: CVE-2018-18443 CVE-2018-18444 CVE-2021-20296 CVE-2021-3474 CVE-2021-3475 CVE-2021-3476 CVE-2021-3477 CVE-2021-3478 +12 more Upstream summary: Cary Phillips reports: [OpenEXR v3.4.11 is a p]atch release that addresses the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4420 Related CVEs: CVE-2024-4467 CVE-2022-40284 CVE-2023-3354 CVE-2025-11234 CVE-2025-49133 CVE-2024-3446 CVE-2024-7383 CVE-2024-7409 +12 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel […]
🟡 Medium ⏱ 10–30 min Last verified: 18 February 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: homebox — multiple vulnerabilities Related CVEs: CVE-2026-26272 CVE-2026-27600 CVE-2026-27981 Upstream summary: Homebox reports: [HIGH] CVE-2026-27981: Auth Rate Limit Bypass via IP Spoofing [MODERATE] CVE-2026-27600: Blind SSRF [MODERATE] CVE-2026-26272: Stored XSS […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h11 accepts some malformed Chunked-Encoding bodies Related CVEs: CVE-2025-43859 Upstream summary: h11 reports: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2022-41862 CVE-2024-10977 CVE-2024-7348 CVE-2025-1094 CVE-2025-12817 CVE-2025-12818 CVE-2025-4207 CVE-2026-6472 +10 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32829 Upstream summary: lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:0052 Related CVEs: CVE-2025-11083 Upstream summary: Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for […]
🟡 Medium ⏱ 10–30 min Last verified: 18 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5964 CVE-2012-2697 CVE-2014-8169 Upstream summary: The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-1991 Upstream summary: A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c of the component UVC Descriptor Handler. The manipulation […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1678-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-32067 CVE-2025-31498 CVE-2024-25629 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2022-4904 CVE-2017-1000381 Upstream summary: c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a […]
