🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: GNU Anubis buffer overflows and format string vulnerabilities Related CVEs: CVE-2004-0353 CVE-2004-0354 Upstream summary: Ulf Härnhammar discovered several vulnerabilities in GNU Anubis. Unsafe uses of `sscanf'. The `%s' format specifier […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13092 CVE-2024-5206 Upstream summary: scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-29434 CVE-2021-32681 CVE-2022-21683 CVE-2026-25517 CVE-2026-28222 CVE-2026-28223 Upstream summary: pkgsrc audit-packages flagged py{36,37,38,39}-wagtail<2.12.4 for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-29434 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1330 Upstream summary: unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows […]
🟡 Medium ⏱ 10–30 min Last verified: 17 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0817 CVE-2004-0579 CVE-2011-2776 CVE-2014-0470 Upstream summary: Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. […]
🟡 Medium ⏱ 10–30 min Last verified: 17 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1160 CVE-2010-1161 CVE-2024-5742 CVE-2026-6842 CVE-2026-6843 Upstream summary: GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5077181 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21242 CVE-2026-21234 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-30536 Upstream summary: slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (n) into both the […]
🟢 Low ⏱ 5–15 min Last verified: 17 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-29366 CVE-2025-9688 Upstream summary: In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executing arbitrary commands on the host machine. […]
