🟡 Medium ⏱ 10–30 min Last verified: 12 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — Multiple integer overflows Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1183 CVE-2004-1308 CVE-2005-1544 CVE-2009-2347 CVE-2010-1411 Upstream summary: Tielei Wang: Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID Related CVEs: CVE-2020-1720 CVE-2021-23214 CVE-2021-23222 CVE-2021-3677 CVE-2022-1552 CVE-2024-10976 CVE-2024-10978 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Incorrect privilege assignment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.29.0-r0 📖 ~4 min read • Source: Alpine secdb entry — buildkit 0.29.0-r0 Related CVEs: CVE-2026-33747 CVE-2026-33748 CVE-2024-23650 CVE-2024-23651 CVE-2024-23652 CVE-2024-23653 Upstream summary: Alpine community repository for vedge ships buildkit 0.29.0-r0 which addresses CVE-2026-33747. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: glibc — gethostbyname buffer overflow Related CVEs: CVE-2015-0235 Upstream summary: Robert Krátký reports: GHOST is a 'buffer overflow' bug affecting the gethostbyname() and gethostbyname2() function calls in the glibc library. […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5073457 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-20962 CVE-2026-21265 CVE-2026-0386 CVE-2026-20804 CVE-2026-20805 CVE-2026-20809 CVE-2026-20811 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4490 CVE-2015-1548 CVE-2017-17663 CVE-2018-18778 Upstream summary: mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5072 Upstream summary: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5075899 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21234 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Access of resource using incompatible […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40682 CVE-2026-42027 CVE-2026-42440 Upstream summary: XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24839 Upstream summary: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users […]
