🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17513 Upstream summary: TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5087062 • MSRC update-guide entry Related CVEs: CVE-2026-32177 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4567 Upstream summary: Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML […]
🟠 High ⏱ 15–60 min Last verified: 22 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0386 CVE-2004-0433 CVE-2004-1309 CVE-2004-1310 CVE-2004-1311 CVE-2006-4800 CVE-2006-6172 CVE-2007-1246 +12 more Upstream summary: Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-31081 Upstream summary: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-48041 Upstream summary: Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:18599 Related CVEs: CVE-2026-2100 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40560 Upstream summary: Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-40084 Upstream summary: opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. For example, it allows command execution via a crafted […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-11831 CVE-2026-34043 Upstream summary: A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other […]
