🟡 Medium ⏱ 10–30 min Last verified: 18 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1962 CVE-2009-4227 CVE-2009-4228 CVE-2010-4262 CVE-2021-40241 CVE-2023-45920 Upstream summary: Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5087420 • MSRC update-guide entry Related CVEs: CVE-2026-35421 CVE-2026-41096 CVE-2026-32161 CVE-2026-40402 CVE-2026-40403 CVE-2026-21530 CVE-2026-33834 CVE-2026-33839 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0313 CVE-2014-9760 CVE-2015-8771 CVE-2018-1000528 CVE-2019-11187 CVE-2019-14466 Upstream summary: Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-1751 CVE-2005-1759 Upstream summary: Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0415 Upstream summary: Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-35936 CVE-2025-51591 Upstream summary: Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5087065 • MSRC update-guide entry Related CVEs: CVE-2026-32177 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 9.7_p1-r5 📖 ~4 min read • Source: Alpine secdb entry — openssh 9.7_p1-r5 Related CVEs: CVE-2025-26465 CVE-2025-26466 CVE-2024-6387 CVE-2023-51767 CVE-2023-48795 CVE-2023-51384 CVE-2023-51385 CVE-2021-36368 +12 more Upstream summary: Alpine main repository for vv3.20 ships openssh 9.7_p1-r5 which […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25045 CVE-2020-25626 CVE-2024-21520 Upstream summary: Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8227-1 Related CVEs: CVE-2026-6276 CVE-2026-5773 CVE-2026-7168 CVE-2026-5545 CVE-2026-6253 CVE-2026-6429 CVE-2026-4873 CVE-2026-3783 +12 more Upstream summary: It was discovered that curl incorrectly reused non-TLS connections when TLS was required in some […]
