🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-893 Related CVEs: CVE-2025-27516 CVE-2024-56201 CVE-2024-56326 CVE-2024-9902 CVE-2024-8775 CVE-2024-11079 CVE-2024-22195 CVE-2024-34064 +3 more Upstream summary: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-rails — multiple vulnerabilities Related CVEs: CVE-2015-1840 CVE-2015-3224 CVE-2015-3225 CVE-2015-3226 CVE-2015-3227 Upstream summary: Ruby on Rails blog: Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-25058 Upstream summary: An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2026-272 Related CVEs: CVE-2025-33219 CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330 CVE-2025-23332 CVE-2025-23345 CVE-2025-23277 +2 more Upstream summary: NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-5091 Upstream summary: Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-42052 Upstream summary: Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= … %> for untrusted metadata […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: x11/cde — Local privilege escalation via CDE dtsession Related CVEs: CVE-2020-2696 Upstream summary: Marco Ivaldi (marco.ivaldi () mediaservice net) reports: A buffer overflow in the CheckMonitor() function in the Common […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-55130 CVE-2025-55132 CVE-2026-0775 CVE-2025-55131 CVE-2025-59465 CVE-2025-59466 CVE-2026-21637 Upstream summary: pkgsrc audit-packages flagged nodejs22<22.22.0 for vulnerability class 'security-bypass'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-55130 Table of contents Symptom & Impact Environment & Reproduction Root […]
