🟢 Low ⏱ 5–15 min Last verified: 21 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0407 Upstream summary: Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14862 Upstream summary: There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5058500 • MSRC update-guide entry Related CVEs: CVE-2025-32710 CVE-2025-29966 CVE-2025-29967 CVE-2025-29833 CVE-2024-49128 CVE-2025-55229 CVE-2025-47955 CVE-2025-29959 +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows Remote Desktop Services […]
🟡 Medium ⏱ 10–30 min Last verified: 21 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0363 CVE-2010-0793 CVE-2010-2725 Upstream summary: Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving (1) […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10932 Upstream summary: lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell […]
🟠 High ⏱ 15–60 min Last verified: 21 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-20005 CVE-2019-20006 CVE-2019-20007 CVE-2019-20198 CVE-2019-20199 CVE-2019-20200 CVE-2019-20201 CVE-2019-20202 +9 more Upstream summary: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-20503 CVE-2022-46871 Upstream summary: usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3886 Upstream summary: libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 6.0.6-r5 📖 ~4 min read • Source: Alpine secdb entry — hylafax 6.0.6-r5 Related CVEs: CVE-2018-17141 Upstream summary: Alpine main repository for vv3.20 ships hylafax 6.0.6-r5 which addresses CVE-2018-17141. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27304 Upstream summary: pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed […]
