🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-019 Related CVEs: CVE-2024-53870 CVE-2024-53871 CVE-2024-53875 Upstream summary: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pitivi — code execution Related CVEs: CVE-2015-0855 Upstream summary: Luke Farone reports: Double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5035933 • MSRC update-guide entry Related CVEs: CVE-2024-21429 CVE-2024-21439 CVE-2024-21441 CVE-2024-21444 CVE-2024-21446 CVE-2024-21450 CVE-2024-21451 CVE-2024-26159 +12 more Affected components: Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: webtrees — vulnerability Upstream summary: Webtrees reports: GEDCOM imports containing errors and HTML displayed unescaped. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the r and n UTF-8 characters to separate […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5034765 • MSRC update-guide entry Related CVEs: CVE-2024-20684 CVE-2024-21357 CVE-2024-21338 CVE-2024-21340 CVE-2024-21349 CVE-2024-21350 CVE-2024-21352 CVE-2024-21354 +12 more Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 Table of […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pillow — Multiple vulnerabilities Related CVEs: CVE-2016-0740 CVE-2016-0775 CVE-2016-9189 CVE-2016-9190 CVE-2019-16865 CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 +2 more Upstream summary: Pillow developers report: This release addresses several security problems, as well as […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2611 Related CVEs: CVE-2024-3596 CVE-2019-11234 CVE-2019-11235 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2022-41859 CVE-2022-41860 +4 more Upstream summary: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 2.7.1-r0 📖 ~4 min read • Source: Alpine secdb entry — weechat 2.7.1-r0 Related CVEs: CVE-2020-8955 CVE-2017-14727 CVE-2017-8073 Upstream summary: Alpine community repository for vv3.20 ships weechat 2.7.1-r0 which addresses CVE-2020-8955. Table of contents Symptom & […]
