🟡 Medium ⏱ 10–30 min Last verified: 5 January 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7828-1 Related CVEs: CVE-2025-61912 CVE-2025-61911 CVE-2021-46823 Upstream summary: It was discovered that Python LDAP incorrectly handled special characters in the special character filtering function. A remote attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 5.4.3-r1 📖 ~4 min read • Source: Alpine secdb entry — xz 5.4.3-r1 Related CVEs: CVE-2025-31115 CVE-2022-1271 Upstream summary: Alpine main repository for vv3.18 ships xz 5.4.3-r1 which addresses CVE-2025-31115. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 5 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-5410 Upstream summary: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:1538-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-3705 CVE-2017-0663 CVE-2017-9049 CVE-2021-3517 CVE-2021-3537 CVE-2022-23308 CVE-2022-29824 CVE-2022-40303 +12 more Upstream summary: The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-11537 Related CVEs: CVE-2025-32463 CVE-2025-32462 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5063950 • MSRC update-guide entry Related CVEs: CVE-2025-50177 CVE-2025-53766 CVE-2025-53778 CVE-2025-49743 CVE-2025-49761 CVE-2025-49762 CVE-2025-50153 CVE-2025-50154 +12 more Affected components: Windows Server 2016 Microsoft summary: Use after free in Windows Message Queuing allows […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-7418 Related CVEs: CVE-2025-1219 CVE-2025-1861 CVE-2024-11235 CVE-2025-1217 CVE-2025-1734 CVE-2025-1736 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:7680 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-3404 CVE-2006-4519 CVE-2007-2356 CVE-2007-2949 CVE-2007-3126 CVE-2007-3741 CVE-2009-1570 CVE-2009-3909 +12 more Upstream summary: Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to […]
