🟠 High ⏱ 15–60 min Last verified: 18 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: samba — potential leakage of arbitrary memory contents Related CVEs: CVE-2004-0600 CVE-2004-0686 CVE-2004-0815 CVE-2004-1154 CVE-2006-1059 CVE-2006-3403 CVE-2007-0452 CVE-2007-0454 +7 more Upstream summary: Samba Team reports: Samba 3.0.29 and beyond contain […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1460 Related CVEs: CVE-2026-1536 CVE-2026-1539 CVE-2026-2369 CVE-2026-0719 CVE-2025-14523 CVE-2025-11021 CVE-2025-12105 CVE-2025-4945 +12 more Upstream summary: A flaw was found in libsoup. An attacker who can control the input for the […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PHP Composer — Multiple vulnerabilities Related CVEs: CVE-2026-40176 CVE-2026-40261 Upstream summary: Composer project reports: Fixed command injection via malicious Perforce reference (GHSA-gqw4-4w2p-838q / CVE-2026-40261) Fixed command injection via malicious Perforce […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lbreakout2 vulnerability in environment variable handling Related CVEs: CVE-2004-0158 Upstream summary: Ulf Härnhammar discovered an exploitable vulnerability in lbreakout2's environmental variable handling. In several instances, the contents of the HOME […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tdiary — injection vulnerability Related CVEs: CVE-2006-6174 Upstream summary: An undisclosed eRuby injection vulnerability had been discovered in tDiary. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1504 Related CVEs: CVE-2026-2921 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808 Upstream summary: An integer overflow in the RIFF parser that can cause crashes for certain input files. (CVE-2026-2921) Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: palemoon — multiple vulnerabilities Related CVEs: CVE-2017-7832 CVE-2017-7835 CVE-2017-7840 CVE-2018-5102 CVE-2018-5122 Upstream summary: Pale Moon reports: CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt Table of […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-dparse — REDoS vulnerability Related CVEs: CVE-2022-39280 Upstream summary: yeisonvargasf reports: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.22.1-r0 📖 ~4 min read • Source: Alpine secdb entry — ngtcp2 1.22.1-r0 Related CVEs: CVE-2026-40170 Upstream summary: Alpine main repository for vedge ships ngtcp2 1.22.1-r0 which addresses CVE-2026-40170. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17571 CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2026-34480 Upstream summary: Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited […]
