🟡 Medium ⏱ 10–30 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0403-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 Upstream summary: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a […]
🟠 High ⏱ 15–60 min Last verified: 23 December 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:12280 Related CVEs: CVE-2025-52999 Upstream summary: Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fix(es): * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999) For more details […]
🟠 High ⏱ 15–60 min Last verified: 23 December 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:20892-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-11731 CVE-2024-55549 CVE-2025-24855 CVE-2021-30560 CVE-2019-18197 CVE-2016-4738 CVE-2017-5029 CVE-2019-11068 +4 more Upstream summary: A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:0853 Related CVEs: CVE-2025-68615 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 23 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7679 (see also SUSE bugzilla) Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Erlang – Absolute Path in Zip Module Related CVEs: CVE-2025-32433 CVE-2025-4748 Upstream summary: https://github.com/erlang/otp/security/advisories/GHSA-9g37-pgj9-wrhc reports: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2009-2108 CVE-2010-2542 CVE-2014-9390 CVE-2015-7545 CVE-2016-2315 CVE-2016-2324 CVE-2018-11233 CVE-2018-11235 +12 more Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted […]
