🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32952 Upstream summary: go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-59088 CVE-2025-59089 Upstream summary: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1582 Related CVEs: CVE-2025-47911 CVE-2025-58190 CVE-2025-61730 CVE-2026-25679 CVE-2026-27139 CVE-2026-27142 CVE-2026-32280 CVE-2026-32288 Upstream summary: The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wheel — CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2026-24049 Upstream summary: https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line tool for manipulating Python […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5061197 • MSRC update-guide entry Related CVEs: CVE-2025-32709 Affected components: Windows Server 2022 Microsoft summary: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2310 CVE-2015-2311 CVE-2015-2312 CVE-2015-2313 CVE-2017-7892 CVE-2022-46149 CVE-2026-32239 CVE-2026-32240 Upstream summary: Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-27638 CVE-2025-24356 Upstream summary: receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4973 Upstream summary: Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by […]
🟠 High ⏱ 15–60 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-0014 CVE-2010-2940 CVE-2010-4341 CVE-2012-3462 CVE-2013-0219 CVE-2013-0220 CVE-2014-0249 CVE-2015-5292 +10 more Upstream summary: System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5661 CVE-2024-28168 Upstream summary: In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send […]
