🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-43964 CVE-2023-51764 CVE-2023-32182 Upstream summary: Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Arti — Security issues related to circuit construction Related CVEs: CVE-2024-35312 CVE-2024-35313 Upstream summary: Tor Project reports: When building anonymizing circuits to or from an onion service with 'lite' vanguards […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-45184 Upstream summary: Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RXSA-2026:13565 Related CVEs: CVE-2026-23136 CVE-2026-23270 CVE-2026-31402 CVE-2026-31431 CVE-2026-43077 CVE-2026-43284 CVE-2025-39766 CVE-2025-68741 +12 more Upstream summary: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: go — invalid headers are normalized, allowing request smuggling Related CVEs: CVE-2019-16276 Upstream summary: The Go project reports: net/http (through net/textproto) used to accept and normalize invalid HTTP/1.1 headers with […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31038 CVE-2025-54812 CVE-2025-54813 CVE-2026-40023 Upstream summary: SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-35934 CVE-2023-46121 CVE-2024-38519 CVE-2026-26331 Upstream summary: yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5082200 • MSRC update-guide entry Related CVEs: CVE-2026-32157 CVE-2026-33827 CVE-2026-33824 CVE-2026-20930 CVE-2026-25250 CVE-2026-23670 CVE-2026-26151 CVE-2026-26155 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Windows Server […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40560 Upstream summary: Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are […]
