🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1533 Related CVEs: CVE-2026-1519 CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 CVE-2025-40777 CVE-2024-11187 CVE-2024-12705 CVE-2024-1737 +12 more Upstream summary: If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: perdition — str_vwrite format string vulnerability Related CVEs: CVE-2007-5740 Upstream summary: SEC-Consult reports: Perdition IMAP is affected by a format string bug in one of its IMAP output-string formatting functions. […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rclone — Multiple vulnerabilities Related CVEs: CVE-2023-45286 CVE-2023-48795 Upstream summary: Multiple vulnerabilities in ssh and golang CVE-2023-45286: HTTP request body disclosure in go-resty disclosure across requests. CVE-2023-48795: The SSH transport […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5075970 • MSRC update-guide entry Related CVEs: CVE-2026-21235 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 CVE-2026-21508 CVE-2026-21253 CVE-2026-21249 +7 more Affected components: Windows Server 2022 Microsoft summary: Use after free in Microsoft Graphics Component allows […]
🟡 Medium ⏱ 10–30 min Last verified: 11 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2459 CVE-2004-2460 CVE-2004-2461 Upstream summary: Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 11 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-3153 CVE-2024-2182 CVE-2025-0650 CVE-2026-5265 CVE-2026-5367 Upstream summary: A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟢 Low ⏱ 5–15 min Last verified: 11 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11654 CVE-2017-11655 Upstream summary: An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.4.9-r0 📖 ~4 min read • Source: Alpine secdb entry — cups 2.4.9-r0 Related CVEs: CVE-2024-35235 CVE-2023-4504 CVE-2023-32324 CVE-2022-26691 CVE-2026-27447 CVE-2026-34978 CVE-2026-34979 CVE-2026-34980 +12 more Upstream summary: Alpine main repository for vedge ships cups 2.4.9-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2288 CVE-2006-2289 CVE-2006-5461 CVE-2006-6870 CVE-2007-3372 CVE-2008-5081 CVE-2009-0758 CVE-2010-2244 +12 more Upstream summary: Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via […]
