🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5946 CVE-2018-1000544 CVE-2019-16892 Upstream summary: The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13645 CVE-2025-60018 CVE-2025-60019 CVE-2026-2574 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13091 Upstream summary: pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2019-14697 CVE-2026-33413 Upstream summary: musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5075970 • MSRC update-guide entry Related CVEs: CVE-2026-21235 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 CVE-2026-21508 CVE-2026-21253 CVE-2026-21249 +7 more Affected components: Windows Server 2016 Microsoft summary: Use after free in Microsoft Graphics Component allows […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8082-1 Related CVEs: CVE-2025-5473 CVE-2025-6035 CVE-2025-48798 CVE-2025-2760 CVE-2025-10934 CVE-2025-14422 CVE-2025-48797 CVE-2017-17785 +10 more Upstream summary: Michael Randrianantenaina discovered that GIMP incorrectly handled certain malformed ICO files. An attacker could possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8219-1 Related CVEs: CVE-2026-32875 CVE-2026-32874 CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: Cameron Criswell discovered that UltraJSON contained a memory leak that would occur when parsing large integers. An attacker could possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1985 Upstream summary: Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5087048 • MSRC update-guide entry Related CVEs: CVE-2026-32177 CVE-2026-35433 Affected components: Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:263-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13435 CVE-2020-13871 CVE-2022-46908 CVE-2025-6965 CVE-2025-70873 CVE-2025-7709 CVE-2019-16168 CVE-2020-13434 +11 more Upstream summary: SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. Table of […]
