🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:19184 Related CVEs: CVE-2026-25679 CVE-2026-32282 CVE-2026-32283 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2022-27664 Upstream summary: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the r and n UTF-8 characters to separate different messages. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5071546 • MSRC update-guide entry Related CVEs: CVE-2025-62454 CVE-2025-62457 CVE-2025-62458 CVE-2025-62466 CVE-2025-62470 CVE-2025-62472 CVE-2025-62473 CVE-2025-62549 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Heap-based buffer overflow in Windows […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jinja2 — Sandbox breakout through attr filter selecting format method Related CVEs: CVE-2024-34064 CVE-2025-27516 Upstream summary: [email protected] reports: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17512 Upstream summary: sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5075912 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21235 CVE-2026-21234 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Access of resource using incompatible […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40333 CVE-2026-40334 CVE-2026-40335 CVE-2026-40336 CVE-2026-40338 CVE-2026-40339 CVE-2026-40340 CVE-2026-40341 Upstream summary: libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23520 CVE-2021-23521 Upstream summary: The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:11371 (see also SUSE bugzilla) Related CVEs: CVE-2026-1519 CVE-2026-3104 CVE-2025-13878 CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 CVE-2025-40777 CVE-2025-40775 +12 more Upstream summary: If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted […]
