🟢 Low ⏱ 5–15 min Last verified: 5 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gstreamer1-rtsp-server — Potential Denial-of-Service (DoS) with specially crafted client requests Related CVEs: CVE-2024-44331 Upstream summary: Qingpeng Du reports: A series of specially crafted client requests during streaming setup (post client […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:8096 Related CVEs: CVE-2025-40909 CVE-2023-47038 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-15095 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-httpbin-[0-9]* for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-15095 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208 +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 3.1c-r0 📖 ~4 min read • Source: Alpine secdb entry — tmux 3.1c-r0 Related CVEs: CVE-2020-27347 Upstream summary: Alpine main repository for vv3.20 ships tmux 3.1c-r0 which addresses CVE-2020-27347. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — potential data loss with zip.vim and specially crafted zip files Related CVEs: CVE-2004-1138 CVE-2005-2368 CVE-2007-2953 CVE-2008-2712 CVE-2008-3076 CVE-2008-3432 CVE-2016-1248 CVE-2025-27423 +1 more Upstream summary: Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.4.1.1-r3 📖 ~4 min read • Source: Alpine secdb entry — opendmarc 1.4.1.1-r3 Related CVEs: CVE-2021-34555 Upstream summary: Alpine community repository for vv3.20 ships opendmarc 1.4.1.1-r3 which addresses CVE-2021-34555. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 5–30 min Last verified: 5 June 2025 Affected versions: RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 4.13.1-r0 📖 ~4 min read • Source: Alpine secdb entry — junit 4.13.1-r0 Related CVEs: CVE-2020-15250 Upstream summary: Alpine community repository for vv3.20 ships junit 4.13.1-r0 which addresses CVE-2020-15250. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16536 CVE-2021-42387 CVE-2021-42388 CVE-2021-43304 CVE-2021-43305 CVE-2022-44010 CVE-2022-44011 CVE-2024-22412 +1 more Upstream summary: Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before […]
