🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Anydesk — Multiple Vulnerabilities Related CVEs: CVE-2020-13160 Upstream summary: Anydesk reports: AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-27154 CVE-2025-66040 Upstream summary: Spotipy is a lightweight Python library for the Spotify Web API. The `CacheHandler` class creates a cache file to store the auth token. Prior […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5073379 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-20876 CVE-2026-20854 CVE-2026-20962 CVE-2026-21265 CVE-2026-0386 CVE-2026-20804 CVE-2026-20805 +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Microsoft Graphics Component allows […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5185 CVE-2008-5186 CVE-2012-3521 CVE-2025-2123 Upstream summary: The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39977 Upstream summary: flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1224 CVE-2008-2357 CVE-2025-49809 Upstream summary: Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-9670 Upstream summary: A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js. Performing manipulation results in inefficient […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17530 Upstream summary: common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection […]
