🟢 Low ⏱ 5–15 min Last verified: 22 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-5477 Upstream summary: A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pixman — heap overflow Related CVEs: CVE-2022-44638 Upstream summary: Pixman reports: for release 0.42.2 Avoid integer overflow leading to out-of-bounds write Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4717 Related CVEs: CVE-2026-23893 Upstream summary: The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: squashfs-tools — Integer overflow Related CVEs: CVE-2015-4645 Upstream summary: Phillip Lougher reports: Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3599 CVE-2026-8700 CVE-2026-8704 Upstream summary: The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5063877 • MSRC update-guide entry Related CVEs: CVE-2025-50177 CVE-2025-53766 CVE-2025-53778 CVE-2025-49751 CVE-2025-49743 CVE-2025-49761 CVE-2025-49762 CVE-2025-50153 +12 more Affected components: Windows Server 2022 Microsoft summary: Use after free in Windows Message Queuing allows […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4447 CVE-2006-5214 CVE-2006-5215 Upstream summary: X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gld — format string and buffer overflow vulnerabilities Related CVEs: CVE-2005-1099 CVE-2005-1100 Upstream summary: Gld has been found vulnerable to multiple buffer overflows as well as multiple format string vulnerabilities. […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-40928 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5073723 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-20962 CVE-2026-21265 CVE-2026-0386 CVE-2026-20804 CVE-2026-20805 CVE-2026-20809 CVE-2026-20812 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
