🟠 High ⏱ 15–60 min Last verified: 19 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8834 (see also SUSE bugzilla) Related CVEs: CVE-2023-41419 Upstream summary: An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. […]
🟡 Medium ⏱ 10–30 min Last verified: 19 December 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-277 Related CVEs: CVE-2022-50500 CVE-2023-53530 CVE-2025-39923 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (CVE-2022-50500) In the […]
🟠 High ⏱ 15–60 min Last verified: 19 December 2025 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-23201 Related CVEs: CVE-2025-13609 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 19 December 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:8837 (see also SUSE bugzilla) Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2022-48279 CVE-2025-54571 Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-3cfb30c1fb Upstream summary: – update to 2.31.5: fixes high GHSA-vh5x-56v6-4368 and moderate GHSA-gr92-w2r5-qw5p – https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in-lix-and-nix/77407 – https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🔴 Critical ⏱ 15–90 min Last verified: 19 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:0174-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can […]
🟠 High ⏱ 15–60 min Last verified: 19 December 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20558 Related CVEs: CVE-2025-40300 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 15–45 min Last verified: 18 December 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2025-33131, IBM Support Bulletin CVE: CVE-2025-33131 NVD summary: IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Wagtail — potential timing attack vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 Upstream summary: Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack […]
