🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0601 CVE-2004-2687 Upstream summary: distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7069 CVE-2017-7557 CVE-2018-14663 CVE-2023-44487 CVE-2025-30193 CVE-2026-0396 CVE-2026-0397 CVE-2026-24028 +12 more Upstream summary: An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are […]
🟡 Medium ⏱ 10–30 min Last verified: 27 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3743 CVE-2015-1370 CVE-2015-8854 CVE-2016-10531 CVE-2017-1000427 CVE-2017-16114 CVE-2018-25110 CVE-2022-21680 +1 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5062597 • MSRC update-guide entry Related CVEs: CVE-2025-47980 CVE-2025-47981 CVE-2025-55230 CVE-2025-49757 CVE-2025-55231 CVE-2025-47971 CVE-2025-47976 CVE-2025-47984 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15167 Upstream summary: In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5070884 • MSRC update-guide entry Related CVEs: CVE-2025-59287 Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9243 CVE-2018-10903 CVE-2020-25659 CVE-2020-36242 CVE-2023-23931 CVE-2023-49083 CVE-2023-50782 CVE-2024-26130 +2 more Upstream summary: HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8255-1 Related CVEs: CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273 CVE-2023-53421 CVE-2023-53520 CVE-2023-53662 CVE-2023-54207 +12 more Upstream summary: Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux […]
🟠 High ⏱ 15–60 min Last verified: 27 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7542-1 Related CVEs: CVE-2025-3576 CVE-2024-26458 CVE-2024-26461 CVE-2024-26462 CVE-2025-24528 CVE-2024-3596 CVE-2024-37370 CVE-2024-37371 +6 more Upstream summary: It was discovered that Kerberos allowed the usage of weak cryptographic standards. An attacker could […]
