🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1828 Upstream summary: The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32877 CVE-2026-32883 CVE-2026-32884 CVE-2026-34582 CVE-2026-44378 Upstream summary: Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-71176 Upstream summary: pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44774 CVE-2026-35051 CVE-2026-39858 CVE-2025-47952 CVE-2024-45410 CVE-2026-40912 CVE-2026-32695 CVE-2026-26999 +12 more Upstream summary: Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0002 CVE-2012-5630 CVE-2012-5644 CVE-2015-3245 CVE-2015-3246 Upstream summary: libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-6706 CVE-2025-11979 CVE-2026-4148 CVE-2015-7882 CVE-2019-2386 CVE-2020-7921 CVE-2018-20802 CVE-2020-7928 +12 more Upstream summary: pkgsrc audit-packages flagged mongodb<6.0.21 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6706 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-3994 Upstream summary: A vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the component Object File […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2020-23856 CVE-2023-2789 CVE-2025-8735 CVE-2025-8736 Upstream summary: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38173 Upstream summary: Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys. Table of contents Symptom & Impact […]
