🟢 Low ⏱ 5–15 min Last verified: 6 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4971 Upstream summary: mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/_vf#?????, (2) /tmp/_if#?????, (3) /tmp/_pf#?????, (4) /tmp/_af#?????, (5) […]
🟠 High ⏱ 15–60 min Last verified: 6 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11509 CVE-2017-6369 CVE-2025-54989 CVE-2025-65104 CVE-2026-27890 CVE-2026-28212 CVE-2026-28214 CVE-2026-28224 +4 more Upstream summary: An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5055526 • MSRC update-guide entry Related CVEs: CVE-2025-26663 CVE-2025-26686 CVE-2025-26670 CVE-2025-27480 CVE-2025-27482 CVE-2025-27491 CVE-2023-40547 CVE-2025-26664 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server […]
🟢 Low ⏱ 5–15 min Last verified: 6 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0825 Upstream summary: Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 6 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3540 Upstream summary: Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-30763 CVE-2026-2240 CVE-2026-2241 CVE-2026-2242 CVE-2026-2869 Upstream summary: pkgsrc audit-packages flagged janet<1.22.0 for vulnerability class 'array-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-30763 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 6 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-12050 Upstream summary: SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1068-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-3172 Upstream summary: Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8063-1 Related CVEs: CVE-2026-0994 CVE-2024-7254 CVE-2025-4565 Upstream summary: It was discovered that Protocol Buffers incorrectly handled recursion when the Python google.protobuf.json_format.ParseDict() function is being used. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33711 CVE-2026-33897 CVE-2026-33898 CVE-2026-33945 CVE-2026-23953 CVE-2026-23954 CVE-2025-52890 CVE-2026-33542 +2 more Upstream summary: Incus is a system container and virtual machine manager. Incus provides an API […]
