🟢 Low ⏱ 5–15 min Last verified: 11 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: up-imapproxy — multiple vulnerabilities Related CVEs: CVE-2004-1035 Upstream summary: Timo Sirainen reports: There are various bugs in up-imapproxy which can crash it. Since up-imapproxy runs in a single process with […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5082142 • MSRC update-guide entry Related CVEs: CVE-2026-32157 CVE-2026-33826 CVE-2026-33827 CVE-2026-33824 CVE-2026-20930 CVE-2026-25250 CVE-2026-23670 CVE-2026-26151 +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Remote Desktop Client allows […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟡 Medium ⏱ 10–30 min Last verified: 11 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp — Multiple vulnerabilities Related CVEs: CVE-2015-8605 CVE-2018-5732 CVE-2018-5733 Upstream summary: ISC reports: Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server (or […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_auth_mellon — Redirect URL validation bypass Related CVEs: CVE-2019-13038 Upstream summary: Jakub Hrozek reports: Version 0.17.0 and older of mod_auth_mellon allows the redirect URL validation to be bypassed by specifying […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.9.3-r0 📖 ~4 min read • Source: Alpine secdb entry — maddy 0.9.3-r0 Related CVEs: CVE-2026-40193 CVE-2023-27582 Upstream summary: Alpine community repository for vedge ships maddy 0.9.3-r0 which addresses CVE-2026-40193. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 5.4.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-ujson 5.4.0-r0 Related CVEs: CVE-2022-31116 CVE-2022-31117 CVE-2021-45958 CVE-2026-32874 CVE-2026-32875 Upstream summary: Alpine community repository for vedge ships py3-ujson 5.4.0-r0 which addresses CVE-2022-31116. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 11 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-7246 CVE-2009-0365 CVE-2011-2176 CVE-2012-2736 CVE-2015-0272 CVE-2015-2924 CVE-2016-0764 CVE-2018-1000135 +5 more Upstream summary: NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used. […]
🟡 Medium ⏱ 10–30 min Last verified: 11 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Enforce the reader to run in constant memory Related CVEs: CVE-2011-1944 CVE-2011-3202 CVE-2011-3919 CVE-2013-2877 CVE-2014-0191 CVE-2014-3660 CVE-2015-1819 Upstream summary: Daniel Veilland reports: Enforce the reader to run in […]
🟢 Low ⏱ 5–15 min Last verified: 11 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-39796 CVE-2022-20011 Upstream summary: In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjacking/overlay attack. This could lead […]
