2026 - Page 1313 of 1372

FreeBSD 12 — py313t-strawberry-graphql — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py313t-strawberry-graphql — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]

Read more
Debian 11 — apache-opennlp — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — apache-opennlp — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-40682 CVE-2026-42027 CVE-2026-42440 Upstream summary: XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes […]

Read more
FreeBSD 15 — py-urllib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py-urllib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — certificate verification failure Related CVEs: CVE-2016-9015 Upstream summary: urllib3 reports: CVE-2016-9015: Certification verification failure Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
Windows Server 2019 — KB5049620 — security update — patch and remediation guide — diagnosis and fix on Windows Server 2019

Windows Server 2019 — KB5049620 — security update — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5049620 • MSRC update-guide entry Related CVEs: CVE-2025-21176 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Debian 13 — kvirc — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — kvirc — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-2951 CVE-2010-2451 CVE-2010-2452 CVE-2010-2785 Upstream summary: The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) […]

Read more
Debian 13 — libmtp — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — libmtp — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9831 CVE-2017-9832 Upstream summary: An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of libmtp (version 1.1.12 and below) allows attackers to cause a denial […]

Read more
Windows Server 2019 — KB5078736 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2019

Windows Server 2019 — KB5078736 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5078736 • MSRC update-guide entry Related CVEs: CVE-2026-23669 CVE-2026-23671 CVE-2026-23672 CVE-2026-23673 CVE-2026-24285 CVE-2026-24287 CVE-2026-24289 CVE-2026-24290  +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Use after free in RPC […]

Read more
openSUSE Tumbleweed — jetty-io — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — jetty-io — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1751-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2332 CVE-2026-5795 CVE-2025-5115 CVE-2024-13009 CVE-2024-22201 CVE-2023-36478 CVE-2022-2048 CVE-2020-27223  +12 more Upstream summary: In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk […]

Read more
Debian 13 — opus-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — opus-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-9638 CVE-2014-9639 Upstream summary: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number […]

Read more
Debian 13 — criu — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — criu — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-5228 CVE-2015-5231 Upstream summary: The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing […]

Read more
CHAT