🟢 Low ⏱ 5–15 min Last verified: 28 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]
🟡 Medium ⏱ 10–30 min Last verified: 28 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0115 CVE-2022-41973 CVE-2022-41974 Upstream summary: The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:3384-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11797 CVE-2021-27807 CVE-2026-3392 CVE-2026-33929 CVE-2016-2175 CVE-2018-8036 CVE-2021-27906 Upstream summary: In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Several vulnerabilities found in IcedTea-Web Related CVEs: CVE-2012-3422 CVE-2012-3423 Upstream summary: The IcedTea project team reports: CVE-2012-3422: Use of uninitialized instance pointers An uninitialized pointer use flaw was found in […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-42845 CVE-2024-44825 Upstream summary: An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-32239 CVE-2026-32240 Upstream summary: pkgsrc audit-packages flagged capnproto<1.4.0 for vulnerability class 'http-request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-32239 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-18385 Upstream summary: Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was […]
🟠 High ⏱ 15–60 min Last verified: 28 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-27985 CVE-2023-27986 CVE-2023-28617 CVE-2024-30202 +7 more Upstream summary: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5084597 • MSRC update-guide entry Related CVEs: CVE-2026-25172 CVE-2026-25173 CVE-2026-26111 Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-23050 Upstream summary: QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in 5.15.19, 6.5.9, and […]
