🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mnGoSearch buffer overflow in UdmDocToTextBuf() Upstream summary: Jedi/Sector One <[email protected]> reported the following on the full-disclosure list: Every document is stored in multiple parts according to its sections (description, body, […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libssh — possible heap-buffer overflow vulnerability Related CVEs: CVE-2014-0017 CVE-2015-1782 CVE-2015-3146 CVE-2016-0739 CVE-2018-10933 CVE-2019-14889 CVE-2019-3855 CVE-2019-3856 +9 more Upstream summary: libssh security advisories: The SSH protocol keeps track of two […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vulnerability found in Expat Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-6702 CVE-2013-0340 CVE-2016-0718 CVE-2016-4472 CVE-2016-5300 CVE-2016-9063 +11 more Upstream summary: Expat 2.8.1 was released yesterday. The key motivation for cutting a release […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1567 Related CVEs: CVE-2025-62518 CVE-2026-33055 CVE-2026-33056 CVE-2026-25727 Upstream summary: tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20839 Upstream summary: systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24439 CVE-2023-40267 CVE-2023-41040 CVE-2026-42215 CVE-2026-42284 CVE-2026-44243 CVE-2026-44244 Upstream summary: All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5055570 • MSRC update-guide entry Related CVEs: CVE-2025-26663 CVE-2025-26686 CVE-2025-26670 CVE-2025-26664 CVE-2025-26665 CVE-2025-26669 CVE-2025-26667 CVE-2025-26668 +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows LDAP – Lightweight […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pitivi — code execution Related CVEs: CVE-2015-0855 Upstream summary: Luke Farone reports: Double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.21.8-r0 📖 ~4 min read • Source: Alpine secdb entry — dpkg 1.21.8-r0 Related CVEs: CVE-2022-1664 CVE-2026-2219 Upstream summary: Alpine main repository for vedge ships dpkg 1.21.8-r0 which addresses CVE-2022-1664. Table of contents Symptom & Impact […]
