🟢 Low ⏱ 5–15 min Last verified: 17 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32711 Upstream summary: pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a maliciously crafted DICOMDIR […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-22805 CVE-2026-27464 CVE-2025-5895 Upstream summary: pkgsrc audit-packages flagged metabase<56.3 for vulnerability class 'server-side-request-forgery'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22805 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40299 Upstream summary: In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000656 CVE-2019-1010083 CVE-2023-30861 CVE-2026-27205 Upstream summary: The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-43618 Upstream summary: GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on […]
🟢 Low ⏱ 5–15 min Last verified: 17 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-0218 Upstream summary: When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:21042-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25621 CVE-2025-64329 CVE-2023-25153 CVE-2022-23471 CVE-2022-31030 CVE-2021-41103 CVE-2020-15157 CVE-2021-21334 Upstream summary: containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1543 CVE-2007-1544 CVE-2007-1545 CVE-2007-1546 CVE-2007-1547 CVE-2013-4256 CVE-2013-4258 Upstream summary: Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7661-1 Related CVEs: CVE-2025-43970 CVE-2023-46565 CVE-2025-43973 CVE-2025-43971 CVE-2025-43972 Upstream summary: It was discovered that GoBGP did not properly manage memory under certain circumstances, which could lead to a buffer overflow. […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8214-1 Related CVEs: CVE-2025-14009 CVE-2021-3842 CVE-2021-43854 CVE-2021-3828 CVE-2019-14751 Upstream summary: It was discovered that NLTK incorrectly handled file extraction when opening a maliciously crafted zip file. An attacker could possibly […]
