🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1341 Upstream summary: Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7977-1 Related CVEs: CVE-2024-53263 CVE-2025-26625 Upstream summary: Ryota K discovered that Git LFS may leak login credentials in certain instances due to failing to check for URL-encoded characters. An attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:245-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29651 CVE-2022-42969 Upstream summary: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1095-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1987 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2021:2130-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-5123 CVE-2014-8991 CVE-2015-2296 CVE-2019-20916 CVE-2023-5752 CVE-2026-1703 Upstream summary: The mirroring support (-M, –use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2026-10711 Related CVEs: CVE-2026-4786 CVE-2026-6100 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1651-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-4317 Upstream summary: Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:8492 Related CVEs: CVE-2026-4424 CVE-2026-4111 Upstream summary: The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:1091 Related CVEs: CVE-2025-32365 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 29 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:8470 Related CVEs: CVE-2026-26171 CVE-2026-32178 CVE-2026-32203 CVE-2026-33116 CVE-2026-26130 Upstream summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes […]
