🟢 Low ⏱ 5–15 min Last verified: 16 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-46146 Upstream summary: Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.30.9-r0 📖 ~4 min read • Source: Alpine secdb entry — kubernetes 1.30.9-r0 Related CVEs: CVE-2025-0426 Upstream summary: Alpine community repository for vv3.20 ships kubernetes 1.30.9-r0 which addresses CVE-2025-0426. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5201 CVE-2014-3495 Upstream summary: The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3567 Upstream summary: A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5072014 • MSRC update-guide entry Related CVEs: CVE-2025-62454 CVE-2025-62457 CVE-2025-62466 CVE-2025-62470 CVE-2025-62472 CVE-2025-62473 CVE-2025-62549 CVE-2025-62571 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Heap-based buffer overflow in Windows […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-7783 Upstream summary: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3529 CVE-2014-3574 CVE-2014-9527 CVE-2016-5000 CVE-2017-12626 CVE-2017-5644 CVE-2019-12415 CVE-2025-31672 Upstream summary: The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6610 Upstream summary: unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5070892 • MSRC update-guide entry Related CVEs: CVE-2025-59287 Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15522 CVE-2019-15523 CVE-2026-41051 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the […]
