🟢 Low ⏱ 5–15 min Last verified: 14 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-22145 Upstream summary: Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26284 CVE-2026-35166 CVE-2026-44301 Upstream summary: Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5077179 • MSRC update-guide entry Related CVEs: CVE-2025-2884 CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21242 CVE-2026-21235 CVE-2026-21234 CVE-2026-21236 +12 more Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 Microsoft summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-22250 CVE-2026-22251 CVE-2026-23535 CVE-2026-42150 Upstream summary: wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5135 Upstream summary: os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36774 Upstream summary: plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash). Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19008 Related CVEs: CVE-2026-4800 CVE-2025-13465 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 5–30 min Last verified: 14 July 2026 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10675 CVE-2020-35381 CVE-2026-32285 Upstream summary: The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call. Table […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3535 Upstream summary: Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors. Table of contents Symptom & Impact Environment & Reproduction Root […]
