🟢 Low ⏱ 5–15 min Last verified: 31 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20164 CVE-2020-5243 Upstream summary: An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5066873 • MSRC update-guide entry Related CVEs: CVE-2016-9535 CVE-2025-24990 CVE-2025-24052 CVE-2025-55335 CVE-2025-55687 CVE-2025-55700 CVE-2025-55701 CVE-2025-58717 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-6663 Upstream summary: pkgsrc audit-packages flagged gstreamer-1.24.10 for vulnerability class 'multiple-vulnerabilities'. Reference: https://discourse.gstreamer.org/t/gstreamer-1-24-10-stable-bug-fix-release/3683 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 31 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0156 CVE-2004-0423 CVE-2008-3962 CVE-2008-7258 Upstream summary: Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 31 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-4615 Upstream summary: The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, […]
🟢 Low ⏱ 5–15 min Last verified: 31 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32725 CVE-2026-32726 Upstream summary: SciTokens C++ is a minimal library for creating and using SciTokens from C or C++. Prior to version 1.4.1, scitokens-cpp is vulnerable to an […]
🟠 High ⏱ 15–60 min Last verified: 31 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15056 CVE-2017-16869 CVE-2018-11243 CVE-2019-14295 CVE-2019-14296 CVE-2019-20021 CVE-2019-20051 CVE-2019-20053 +12 more Upstream summary: p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 31 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15522 CVE-2019-15523 CVE-2026-41051 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the […]
🟡 Medium ⏱ 10–30 min Last verified: 31 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8011 CVE-2015-8012 CVE-2020-27827 CVE-2021-43612 CVE-2023-41910 CVE-2026-46433 Upstream summary: Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 31 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. […]
