🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3374 Upstream summary: Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2761 CVE-2010-4410 CVE-2010-4411 CVE-2025-40927 Upstream summary: The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6426 CVE-2013-6428 CVE-2014-3801 CVE-2015-5295 CVE-2016-9185 CVE-2023-1625 CVE-2024-7319 Upstream summary: The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5066133 • MSRC update-guide entry Related CVEs: CVE-2025-55248 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft summary: Inadequate encryption strength in .NET.NET Framework, Visual Studio allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1784 CVE-2018-19044 CVE-2018-19045 CVE-2018-19046 CVE-2018-19115 CVE-2021-44225 CVE-2024-41184 Upstream summary: The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761 CVE-2022-31015 CVE-2024-49768 CVE-2024-49769 Upstream summary: Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5050006 • MSRC update-guide entry Related CVEs: CVE-2025-21294 CVE-2025-21295 CVE-2025-21296 CVE-2025-21297 CVE-2025-21298 CVE-2025-21307 CVE-2025-21411 CVE-2025-21413 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0949 Upstream summary: xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7567-1 Related CVEs: CVE-2025-47947 CVE-2025-48866 Upstream summary: Simon Studer discovered that ModSecurity incorrectly handled certain JSON objects. An attacker could possibly use this issue to cause a denial of service. […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7976-1 Related CVEs: CVE-2025-7783 Upstream summary: Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this […]
