🟢 Low ⏱ 5–15 min Last verified: 28 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7298 Upstream summary: query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% […]
🟡 Medium ⏱ 10–30 min Last verified: 28 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7144 CVE-2015-1852 CVE-2015-7546 CVE-2022-2447 CVE-2026-22797 Upstream summary: OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0102 CVE-2003-1092 CVE-2004-1304 CVE-2007-1536 CVE-2007-2026 CVE-2007-2799 CVE-2009-0947 CVE-2009-0948 +12 more Upstream summary: Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:16693 Related CVEs: CVE-2026-39979 CVE-2026-40164 Upstream summary: jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4606 Upstream summary: Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 28 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 CVE-2020-26262 CVE-2020-4067 CVE-2020-6061 CVE-2020-6062 CVE-2026-27624 +1 more Upstream summary: An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-7339 Upstream summary: on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5065430 • MSRC update-guide entry Related CVEs: CVE-2025-54918 CVE-2025-55226 CVE-2025-53799 CVE-2025-54099 CVE-2025-54101 CVE-2025-54110 CVE-2025-54111 CVE-2025-54894 +12 more Affected components: Windows Server 2022 Microsoft summary: Improper authentication in Windows NTLM allows an authorized […]
🟠 High ⏱ 15–60 min Last verified: 28 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-0131 CVE-2024-0147 CVE-2024-0150 CVE-2024-53869 CVE-2025-23244 CVE-2025-23279 CVE-2025-23280 CVE-2025-23282 +6 more Upstream summary: NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 28 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0053 CVE-2007-2459 CVE-2008-1928 CVE-2024-53901 CVE-2026-8669 Upstream summary: Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel […]
