🟢 Low ⏱ 5–15 min Last verified: 15 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0007 CVE-2010-3999 Upstream summary: gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:3291 Related CVEs: CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Upstream summary: The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4575 CVE-2015-4054 CVE-2015-6817 CVE-2021-3935 CVE-2025-12819 CVE-2025-2291 CVE-2026-6664 CVE-2026-6665 +2 more Upstream summary: The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2060 Upstream summary: The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1274-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1270 CVE-2007-4988 CVE-2020-12672 CVE-2025-32460 CVE-2025-27795 CVE-2025-27796 CVE-2006-3744 CVE-2008-1096 +12 more Upstream summary: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33026 Upstream summary: The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-28117 Upstream summary: libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8018-3 Related CVEs: CVE-2026-0672 CVE-2025-15282 CVE-2025-12084 CVE-2026-0865 CVE-2025-8194 CVE-2025-0938 CVE-2024-11168 CVE-2024-6232 +12 more Upstream summary: USN-8018-1 fixed CVE-2025-12084, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865 for python3. This update provides the corresponding updates for […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35093 CVE-2022-1215 CVE-2026-35094 Upstream summary: A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
