🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xmms — Integer Overflow And Underflow Vulnerabilities Related CVEs: CVE-2007-0653 CVE-2007-0654 Upstream summary: Secunia reports: Secunia Research has discovered two vulnerabilities in XMMS, which can be exploited by malicious people […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4420 Related CVEs: CVE-2024-4467 CVE-2022-40284 CVE-2023-3354 CVE-2020-35517 CVE-2025-11234 CVE-2025-49133 CVE-2024-3446 CVE-2024-7383 +12 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-27206 Upstream summary: Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0786 CVE-2012-0787 CVE-2012-6607 CVE-2013-6412 CVE-2017-7555 CVE-2025-2588 Upstream summary: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-40889 CVE-2023-40890 Upstream summary: A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-1231 CVE-2023-3431 CVE-2023-3432 CVE-2026-0858 Upstream summary: XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.4.4-r0 📖 ~4 min read • Source: Alpine secdb entry — clamav 1.4.4-r0 Related CVEs: CVE-2026-20031 CVE-2025-20260 CVE-2025-20128 CVE-2024-20506 CVE-2024-20505 CVE-2024-20290 CVE-2024-20328 CVE-2022-48579 +12 more Upstream summary: Alpine community repository for vedge ships clamav 1.4.4-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10375 Upstream summary: Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
