🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2007 CVE-2005-2147 CVE-2005-3980 CVE-2005-4065 CVE-2005-4305 CVE-2005-4644 CVE-2006-2106 CVE-2006-3695 +9 more Upstream summary: Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23368 CVE-2021-23382 CVE-2021-23566 CVE-2023-44270 CVE-2024-55565 CVE-2026-41305 Upstream summary: The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-13939 Upstream summary: String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5063878 • MSRC update-guide entry Related CVEs: CVE-2025-50176 CVE-2025-50177 CVE-2025-53766 CVE-2025-53778 CVE-2025-49751 CVE-2025-49743 CVE-2025-49761 CVE-2025-49762 +12 more Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server 2022 Microsoft summary: […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45897 Upstream summary: exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-41419 Upstream summary: An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14158 CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 CVE-2025-6176 Upstream summary: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5087058 • MSRC update-guide entry Related CVEs: CVE-2026-32177 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker to […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-0155 CVE-2022-0536 CVE-2023-26159 CVE-2024-28849 CVE-2026-40895 Upstream summary: follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Upstream summary: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a […]
