🟡 Medium ⏱ 10–30 min Last verified: 3 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: X11 server — pixmap allocation vulnerability Related CVEs: CVE-2004-0083 CVE-2004-0084 CVE-2004-0106 CVE-2005-2495 Upstream summary: Allocating large pixmaps by a client can trigger an integer overflow in the X server, potentially […]
🟢 Low ⏱ 5–15 min Last verified: 3 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.1.49-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-gitpython 3.1.49-r0 Related CVEs: CVE-2026-42215 CVE-2026-42284 CVE-2023-41040 Upstream summary: Alpine community repository for vedge ships py3-gitpython 3.1.49-r0 which addresses CVE-2026-42215. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 3 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6384 CVE-2014-4615 CVE-2019-3830 Upstream summary: (1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1542 Related CVEs: CVE-2026-27135 CVE-2024-28182 CVE-2023-44487 CVE-2023-35945 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops […]
🟢 Low ⏱ 5–15 min Last verified: 3 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ipython — Execution with Unnecessary Privileges Related CVEs: CVE-2022-21699 Upstream summary: IPython project reports: IPython 8.0.1, 7.31.1 and 5.11 are security releases that change some default values in order to […]
🟠 High ⏱ 15–60 min Last verified: 3 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2864 CVE-2012-5129 CVE-2013-1872 CVE-2013-1993 CVE-2019-5068 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922 +2 more Upstream summary: Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-71176 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-test-[0-9]* for vulnerability class 'insecure-temporary-files'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-71176 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 3 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpmailer — Multiple vulnerability Related CVEs: CVE-2016-10033 CVE-2016-10045 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 Upstream summary: The PHPMailer Team reports: CVE-2018-19296:Fix potential object injection vulnerability. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1647 Related CVEs: CVE-2026-27135 CVE-2024-36137 CVE-2026-21710 CVE-2026-21712 CVE-2026-21713 CVE-2026-21714 CVE-2026-21715 CVE-2026-21716 +12 more Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to […]
