🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:7160 Related CVEs: CVE-2025-24898 Upstream summary: Bootable container system Security Fix(es): * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898) For more details about the security issue(s), including the impact, a CVSS […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bugzilla — multiple vulnerabilities Related CVEs: CVE-2004-1061 CVE-2005-2173 CVE-2005-2174 CVE-2006-0913 CVE-2006-0914 CVE-2006-0915 CVE-2006-0916 CVE-2006-2420 +9 more Upstream summary: A Bugzilla Security Advisory reports: Cross-Site Scripting When viewing a single bug […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: QtNetworkAuth — predictable seeding of PRNG in QAbstractOAuth Related CVEs: CVE-2024-36048 Upstream summary: Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2025-8735 CVE-2025-8736 CVE-2020-23856 CVE-2023-2789 Upstream summary: pkgsrc audit-packages flagged cflow-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-16165 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — minor security problems. Related CVEs: CVE-2016-2193 CVE-2016-3065 Upstream summary: PostgreSQL project reports: Security Fixes for RLS, BRIN This release closes security hole CVE-2016-2193 (https://access.redhat.com/security/cve/CVE-2016-2193), where a query plan […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5082404 • MSRC update-guide entry Related CVEs: CVE-2026-23666 CVE-2026-32226 Affected components: Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft summary: Improper input validation in .NET Framework allows an unauthorized […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8011 CVE-2015-8012 CVE-2020-27827 CVE-2021-43612 CVE-2023-41910 CVE-2026-46433 Upstream summary: Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45139 CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-45296 CVE-2026-4867 CVE-2026-4923 CVE-2026-4926 Upstream summary: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1307 Related CVEs: CVE-2025-54514 CVE-2025-62626 CVE-2023-31315 CVE-2023-20593 Upstream summary: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially […]
