🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ruby-saml — XML signature wrapping attack Related CVEs: CVE-2016-5697 Upstream summary: RubySec reports: ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PptiPNG — Global-buffer-overflow Related CVEs: CVE-2008-5101 CVE-2012-4432 CVE-2015-7801 CVE-2015-7802 CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 CVE-2023-43907 Upstream summary: Frank-Z7 reports: Running optipng with the "-zm 3 -zc 1 -zw 256 -snip -out" configuration […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.8-r5 📖 ~4 min read • Source: Alpine secdb entry — avahi 0.8-r5 Related CVEs: CVE-2021-3502 CVE-2021-3468 CVE-2026-34933 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2026-24401 CVE-2024-52615 +10 more Upstream summary: Alpine main repository for vedge ships avahi 0.8-r5 which […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0839 CVE-2015-8869 CVE-2017-9779 CVE-2018-9838 CVE-2026-28364 CVE-2026-34353 Upstream summary: OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9130 CVE-2017-18342 CVE-2019-20477 CVE-2020-14343 CVE-2020-1747 Upstream summary: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-10132 CVE-2016-10141 CVE-2025-55780 CVE-2026-25556 CVE-2016-8729 CVE-2017-17858 CVE-2017-5627 CVE-2017-5628 +12 more Upstream summary: regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-29063 Upstream summary: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4510 Upstream summary: cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0808 Upstream summary: as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or […]
