🟡 Medium ⏱ 15–45 min Last verified: 5 February 2026 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2025-2140, IBM Support Bulletin CVE: CVE-2025-2140 NVD summary: IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the […]
🟢 Low ⏱ 5–15 min Last verified: 5 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: roundcube-thunderbird_labels — RCE with custom label titles Upstream summary: The Roundcube project reports: Description: Remote code execution vulnerability in roundcube-thunderbird_labels when tb_label_modify_labels is enabled. Workaround: If you cannot upgrade to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-28348 CVE-2026-28350 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-lxml-html-clean<0.4.4 for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28348 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
OAuth 2 is the industry-standard authorization framework that lets third-party apps securely access user data without ever handling passwords. Instead of asking users to share credentials, OAuth 2 delegates authentication to the service provider (like Google, GitHub, or Progressive Robot) and issues limited, revocable tokens that represent specific permissions.
🟡 Medium ⏱ 10–30 min Last verified: 5 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpdf — multiple remote Stream.CC vulnerabilities Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 CVE-2005-2097 CVE-2007-3387 CVE-2007-4352 CVE-2007-5392 +1 more Upstream summary: Secunia Research reports: Secunia Research has discovered some vulnerabilities in […]
🟢 Low ⏱ 5–15 min Last verified: 5 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-PEAR — PEAR installer arbitrary code execution vulnerability Upstream summary: Gregory Beaver reports: A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5087049 • MSRC update-guide entry Related CVEs: CVE-2026-32177 CVE-2026-35433 Affected components: Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker […]
🟠 High ⏱ 15–60 min Last verified: 5 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS Related CVEs: CVE-2005-2491 CVE-2007-1659 CVE-2007-1660 CVE-2007-1661 CVE-2007-1662 CVE-2007-4766 CVE-2007-4767 CVE-2007-4768 +9 more Upstream summary: [email protected] reports: The PCRE2 […]
🟢 Low ⏱ 5–15 min Last verified: 5 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: atutor — multiple vulnerabilities Upstream summary: ATutor reports: Security Fixes: Added a new layer of security over all php superglobals, fixed several XSS, CSRF, and SQL injection vulnerabilities. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9845 Related CVEs: CVE-2025-22871 CVE-2022-27664 CVE-2022-2879 CVE-2022-2880 CVE-2022-41715 CVE-2022-41717 CVE-2022-32189 Upstream summary: Command line utility to control osbuild-composer Security Fix(es): * net/[http:](http:) Request smuggling due to acceptance of invalid chunked data in […]
