🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2026:1001-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31812 Upstream summary: Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger […]
🟢 Low ⏱ 5–15 min Last verified: 27 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25573 Upstream summary: An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 27 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-1231 CVE-2023-3431 CVE-2023-3432 CVE-2026-0858 Upstream summary: XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the […]
🟠 High ⏱ 15–60 min Last verified: 27 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8263-1 Related CVEs: CVE-2026-25796 CVE-2026-25797 CVE-2026-24484 CVE-2026-25637 CVE-2026-25576 CVE-2026-25798 CVE-2026-24481 CVE-2026-25898 +12 more Upstream summary: It was discovered that ImageMagick incorrectly handled certain malformed image files in certain instances. If […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2REDIS6-2025-015 Related CVEs: CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 CVE-2025-32023 CVE-2025-48367 CVE-2025-21605 CVE-2024-46981 +12 more Upstream summary: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below […]
🟠 High ⏱ 15–60 min Last verified: 27 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7837-1 Related CVEs: CVE-2025-47219 CVE-2022-1920 CVE-2022-1921 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122 +2 more Upstream summary: Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 27 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2003 CVE-2017-16612 Upstream summary: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5065474 • MSRC update-guide entry Related CVEs: CVE-2025-54918 CVE-2025-55226 CVE-2025-53799 CVE-2025-53800 CVE-2025-48807 CVE-2025-49734 CVE-2025-53797 CVE-2025-53798 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Improper authentication […]
🟡 Medium ⏱ 10–30 min Last verified: 27 March 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:01500-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-31335 CVE-2017-16853 Upstream summary: The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:9689 Related CVEs: CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 CVE-2026-34268 CVE-2026-34282 +12 more Upstream summary: The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software […]
