🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.10.1-r0 📖 ~4 min read • Source: Alpine secdb entry — libtpms 0.10.1-r0 Related CVEs: CVE-2025-49133 Upstream summary: Alpine community repository for vedge ships libtpms 0.10.1-r0 which addresses CVE-2025-49133. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 23 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1294 CVE-2014-8517 Upstream summary: The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / […]
🟢 Low ⏱ 5–15 min Last verified: 23 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0050 Upstream summary: snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000164 CVE-2024-1135 CVE-2024-6827 Upstream summary: gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result […]
🟠 High ⏱ 15–60 min Last verified: 23 December 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8137-1 Related CVEs: CVE-2025-61594 CVE-2024-35176 CVE-2025-6442 CVE-2024-41123 CVE-2024-41946 CVE-2024-47220 CVE-2024-39908 CVE-2025-24294 +12 more Upstream summary: It was discovered that the Ruby URI gem did not properly handle sensitive information when […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0150-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45417 CVE-2025-54389 CVE-2025-54409 Upstream summary: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or […]
🟢 Low ⏱ 5–15 min Last verified: 23 December 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7976-1 Related CVEs: CVE-2025-7783 Upstream summary: Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:4054-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28168 Upstream summary: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate […]
🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15094-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22895 Upstream summary: The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an […]
