🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2078 CVE-2019-10648 CVE-2025-14306 CVE-2025-14307 CVE-2025-14308 Upstream summary: Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2524 Related CVEs: CVE-2024-27316 CVE-2021-31618 CVE-2020-11993 CVE-2020-9490 CVE-2019-9511 CVE-2019-9516 CVE-2019-9517 CVE-2018-11763 +2 more Upstream summary: HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7045-1 Related CVEs: CVE-2024-47175 Upstream summary: Simone Margaritelli discovered that libppd incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7444-1 Related CVEs: CVE-2023-32683 CVE-2023-43796 CVE-2022-39374 CVE-2023-41335 CVE-2022-39335 CVE-2023-42453 CVE-2024-31208 CVE-2024-53863 Upstream summary: It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An attacker could […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7773-1 Related CVEs: CVE-2025-31178 CVE-2025-31176 CVE-2025-31181 CVE-2025-31179 CVE-2025-31180 CVE-2025-31177 CVE-2025-3359 CVE-2018-19491 +6 more Upstream summary: ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory operations. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.7.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-cairosvg 2.7.0-r0 Related CVEs: CVE-2023-27586 CVE-2021-21236 Upstream summary: Alpine community repository for vv3.19 ships py3-cairosvg 2.7.0-r0 which addresses CVE-2023-27586. Table of contents Symptom & Impact […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:4215-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-37026 CVE-2020-25623 CVE-2020-35733 CVE-2016-1000107 CVE-2025-26618 Upstream summary: In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8037 (see also SUSE bugzilla) Related CVEs: CVE-2024-42934 Upstream summary: OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-8132 Related CVEs: CVE-2025-32049 CVE-2025-4948 CVE-2025-2784 CVE-2025-32914 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
