🟢 Low ⏱ 5–15 min Last verified: 23 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-9375 Upstream summary: XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 0.9.23-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-impacket 0.9.23-r0 Related CVEs: CVE-2021-31800 Upstream summary: Alpine community repository for vv3.20 ships py3-impacket 0.9.23-r0 which addresses CVE-2021-31800. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2312 CVE-2018-6790 CVE-2018-6791 CVE-2024-36041 Upstream summary: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28154 CVE-2024-43788 CVE-2025-68157 CVE-2025-68458 Upstream summary: Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8096 Related CVEs: CVE-2025-40909 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7983-1 Related CVEs: CVE-2025-64329 CVE-2024-25621 CVE-2024-40635 CVE-2023-25153 CVE-2023-25173 CVE-2022-23471 CVE-2022-24769 CVE-2022-24778 +1 more Upstream summary: David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 23 May 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7444-1 Related CVEs: CVE-2023-32683 CVE-2023-43796 CVE-2022-39374 CVE-2023-41335 CVE-2022-39335 CVE-2023-42453 CVE-2024-31208 CVE-2024-53863 +7 more Upstream summary: It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0147-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-56431 Upstream summary: oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:7147 Related CVEs: CVE-2025-24898 CVE-2024-2905 Upstream summary: The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be […]
🟠 High ⏱ 15–60 min Last verified: 23 May 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-10867 Related CVEs: CVE-2025-30754 CVE-2025-30749 CVE-2025-50059 CVE-2025-50106 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
