🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libdwarf — multiple vulnerabilities Related CVEs: CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 CVE-2016-5031 CVE-2016-5032 CVE-2016-5033 CVE-2016-5035 +12 more Upstream summary: Christian Rebischke reports: libdwarf is vulnerable to multiple issues including arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-196 Related CVEs: CVE-2025-23272 CVE-2025-23247 Upstream summary: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1669 Related CVEs: CVE-2026-40354 Upstream summary: Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icoutils — check_offset overflow on 64-bit systems Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 Upstream summary: Choongwoo Han reports: An exploitable crash exists in the wrestool utility on 64-bit systems where […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0804 CVE-2010-1513 CVE-2010-2350 Upstream summary: Ziproxy 2.6.0, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5053887 • MSRC update-guide entry Related CVEs: CVE-2025-24035 CVE-2025-24045 CVE-2025-24064 CVE-2025-26645 CVE-2024-9157 CVE-2025-24044 CVE-2025-24987 CVE-2025-24988 +12 more Affected components: Windows Server 2025 Microsoft summary: Sensitive data storage in improperly locked memory in […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1915 CVE-2004-1916 CVE-2004-1917 Upstream summary: Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5062570 • MSRC update-guide entry Related CVEs: CVE-2024-36357 CVE-2024-36350 CVE-2025-47980 CVE-2025-47981 CVE-2025-48822 CVE-2025-55230 CVE-2025-49757 CVE-2025-53789 +12 more Affected components: Windows Server 2025 Microsoft summary: The vulnerability assigned to this CVE is in […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0705 CVE-2003-0706 CVE-2004-0458 Upstream summary: Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction […]
