🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:3343 Related CVEs: CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-58183 Upstream summary: The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpMyAdmin — XSS vulnerability in drag-and-drop upload Related CVEs: CVE-2020-5504 Upstream summary: phpMyAdmin Team reports: PMASA-2023-1 XSS vulnerability in drag-and-drop upload Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: enscript — arbitrary code execution vulnerability Related CVEs: CVE-2004-1184 CVE-2004-1185 CVE-2004-1186 CVE-2008-3863 CVE-2008-4306 Upstream summary: Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the read_special_escape function in src/psgen.c […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-34591 CVE-2026-41140 Upstream summary: Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-52530 CVE-2025-32906 CVE-2026-2369 CVE-2024-52532 CVE-2025-32049 Upstream summary: pkgsrc audit-packages flagged libsoup3<3.6.0 for vulnerability class 'request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-52530 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-20146 Upstream summary: Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6271 Upstream summary: The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception. Table […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5053618 • MSRC update-guide entry Related CVEs: CVE-2025-24035 CVE-2025-26645 CVE-2024-9157 CVE-2025-24044 CVE-2025-24987 CVE-2025-24988 CVE-2025-21180 CVE-2025-24995 +12 more Affected components: Windows Server 2022 Microsoft summary: Sensitive data storage in improperly locked memory in […]
