🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:6266 Related CVEs: CVE-2023-40403 Upstream summary: libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9181 Upstream summary: perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which, when processed by an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 4.3.3-r0 📖 ~4 min read • Source: Alpine secdb entry — zeromq 4.3.3-r0 Related CVEs: CVE-2020-15166 CVE-2019-13132 CVE-2019-6250 Upstream summary: Alpine main repository for vv3.18 ships zeromq 4.3.3-r0 which addresses CVE-2020-15166. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8272-1 Related CVEs: CVE-2023-28447 CVE-2021-21408 CVE-2021-26119 CVE-2021-26120 CVE-2021-29454 Upstream summary: Takuya Aramaki discovered that Smarty did not properly escape JavaScript code. An attacker could possibly use this issue to conduct […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14690-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30187 Upstream summary: Azure Storage Library Information Disclosure Vulnerability Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-3261 Related CVEs: CVE-2024-7347 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0308 (see also SUSE bugzilla) Related CVEs: CVE-2024-56201 Upstream summary: Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows […]
🟡 Medium ⏱ 10–30 min Last verified: 18 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 CVE-2017-8911 CVE-2019-18849 Upstream summary: An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.32.8-r0 📖 ~4 min read • Source: Alpine secdb entry — mpg123 1.32.8-r0 Related CVEs: CVE-2024-10573 Upstream summary: Alpine main repository for vedge ships mpg123 1.32.8-r0 which addresses CVE-2024-10573. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 18 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1562 CVE-2015-2305 Upstream summary: Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. Table of contents Symptom […]
