🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:6391 Related CVEs: CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2026-21968 CVE-2025-53040 CVE-2025-53042 +12 more Upstream summary: MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2192 Upstream summary: The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27297 CVE-2024-36050 CVE-2024-38531 CVE-2024-47174 CVE-2026-39860 Upstream summary: Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5073695 • MSRC update-guide entry Related CVEs: CVE-2026-0386 CVE-2026-20816 CVE-2026-20820 CVE-2026-20821 CVE-2026-20828 CVE-2026-20831 CVE-2026-20833 CVE-2026-20834 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Improper access control in Windows […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-3804 CVE-2021-3660 CVE-2021-3698 CVE-2024-6126 CVE-2026-4802 Upstream summary: It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-17495 Upstream summary: django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-5238 CVE-2022-24724 CVE-2022-39209 CVE-2023-22483 CVE-2023-22484 CVE-2023-22485 CVE-2023-22486 CVE-2023-24824 +2 more Upstream summary: The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 9.18.7-r0 📖 ~4 min read • Source: Alpine secdb entry — bind 9.18.7-r0 Related CVEs: CVE-2022-2795 CVE-2022-2881 CVE-2022-2906 CVE-2022-3080 CVE-2022-38177 CVE-2022-38178 CVE-2026-3039 CVE-2026-3592 +12 more Upstream summary: Alpine main repository for vv3.20 ships bind 9.18.7-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 6 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8122-1 Related CVEs: CVE-2021-43302 CVE-2026-25994 CVE-2021-43300 CVE-2021-43301 CVE-2021-32686 CVE-2021-43299 CVE-2018-1000099 CVE-2021-37706 +6 more Upstream summary: Youngsung Kim discovered that PJSIP did not properly parse numeric header fields in SIP messages. […]
🟡 Medium ⏱ 10–30 min Last verified: 6 March 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7814-1 Related CVEs: CVE-2024-23837 CVE-2025-53537 CVE-2024-28871 CVE-2024-45797 Upstream summary: It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to […]
