🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0274 CVE-2007-2807 CVE-2009-1789 Upstream summary: Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-22250 CVE-2026-22251 CVE-2026-23535 CVE-2026-42150 Upstream summary: wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5087067 • MSRC update-guide entry Related CVEs: CVE-2026-32177 CVE-2026-35433 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtorrent-rasterbar — denial of service Related CVEs: CVE-2016-5301 Upstream summary: Brandon Perry reports: The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-65637 Upstream summary: A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2809 Related CVEs: CVE-2025-0633 CVE-2023-33461 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory (CVE-2025-0633) Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-4067 Upstream summary: The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the pattern […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2861 Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27088 Upstream summary: es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1629 CVE-2013-5123 CVE-2014-8991 CVE-2019-20916 CVE-2021-3572 CVE-2023-5752 CVE-2025-8869 CVE-2026-1703 +2 more Upstream summary: pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform […]
