🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16468 CVE-2018-8048 CVE-2019-15587 CVE-2022-23514 CVE-2022-23515 CVE-2022-23516 Upstream summary: In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15795 CVE-2019-15796 CVE-2020-27351 CVE-2025-6966 Upstream summary: python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-45409 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-21034 Related CVEs: CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5082418 • MSRC update-guide entry Related CVEs: CVE-2026-23666 CVE-2026-33116 CVE-2026-32226 Affected components: Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Improper input validation […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11187 CVE-2022-36179 CVE-2022-36180 CVE-2025-32807 Upstream summary: Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8729 CVE-2016-9601 CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-9216 CVE-2020-12268 CVE-2023-46361 Upstream summary: An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-0720 CVE-2016-0721 CVE-2017-2661 CVE-2018-1079 CVE-2018-1086 CVE-2022-1049 CVE-2022-2735 Upstream summary: Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:2210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30551 CVE-2026-23831 CVE-2026-24117 CVE-2023-33199 CVE-2025-29923 Upstream summary: Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8161-1 Related CVEs: CVE-2026-3195 CVE-2024-6519 CVE-2026-3842 CVE-2026-3196 CVE-2026-2243 CVE-2026-0665 CVE-2025-11234 CVE-2025-14876 +12 more Upstream summary: It was discovered that the LSI53C895A SCSI Host Bus Adapter implementation of QEMU incorrectly handled […]
