🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8621 Upstream summary: t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 8.4.9-r0 📖 ~4 min read • Source: Alpine secdb entry — php84 8.4.9-r0 Related CVEs: CVE-2025-1735 CVE-2025-6491 CVE-2025-1220 CVE-2026-6722 CVE-2026-6735 CVE-2026-7258 CVE-2026-7259 CVE-2026-7261 +5 more Upstream summary: Alpine community repository for vedge ships php84 8.4.9-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7758 Upstream summary: Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2411 CVE-2006-6174 CVE-2006-6852 CVE-2010-0726 Upstream summary: Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-62875 Upstream summary: An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-24786 Upstream summary: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-40932 Upstream summary: Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 […]
🟡 Medium ⏱ 10–30 min Last verified: 10 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6313 CVE-2017-7526 CVE-2018-12020 CVE-2018-6829 CVE-2019-14855 Upstream summary: The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2441 Related CVEs: CVE-2024-0209 CVE-2024-0208 CVE-2023-0412 CVE-2023-0417 CVE-2024-11596 CVE-2024-4853 CVE-2025-13946 CVE-2025-5601 +12 more Upstream summary: IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows […]
🟢 Low ⏱ 5–15 min Last verified: 10 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-25896 Upstream summary: This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed. Table of contents […]
