🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:3095 Related CVEs: CVE-2026-0994 CVE-2022-1941 CVE-2021-22570 Upstream summary: The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5075970 • MSRC update-guide entry Related CVEs: CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 CVE-2026-21508 CVE-2026-21253 CVE-2026-21249 CVE-2026-21239 +6 more Affected components: Windows Server 2025 Microsoft summary: Heap-based buffer overflow in Windows Ancillary Function Driver […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ingo — local arbitrary shell command execution Related CVEs: CVE-2006-5449 Upstream summary: The Horde team reports a vulnerability within Ingo, the filter management suite. The vulnerability is caused due to […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jabberd — authentication bypass vulnerability Related CVEs: CVE-2006-1329 CVE-2012-3525 CVE-2017-10807 Upstream summary: SecurityFocus reports: JabberD is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32952 Upstream summary: go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-59088 CVE-2025-59089 Upstream summary: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1582 Related CVEs: CVE-2025-47911 CVE-2025-58190 CVE-2025-61730 CVE-2026-25679 CVE-2026-27139 CVE-2026-27142 CVE-2026-32280 CVE-2026-32288 Upstream summary: The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wheel — CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2026-24049 Upstream summary: https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line tool for manipulating Python […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5061197 • MSRC update-guide entry Related CVEs: CVE-2025-32709 Affected components: Windows Server 2022 Microsoft summary: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2310 CVE-2015-2311 CVE-2015-2312 CVE-2015-2313 CVE-2017-7892 CVE-2022-46149 CVE-2026-32239 CVE-2026-32240 Upstream summary: Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to […]
