🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-5572 CVE-2026-5080 Upstream summary: CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13959 Upstream summary: The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8246-1 Related CVEs: CVE-2026-41411 CVE-2026-39881 CVE-2026-35177 CVE-2026-33412 CVE-2026-34982 CVE-2026-32249 CVE-2026-26269 CVE-2026-28419 +12 more Upstream summary: Michał Majchrowicz discovered that Vim’s zip plugin could overwrite arbitrary files. An attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14832-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-7254 CVE-2026-0994 CVE-2025-4565 Upstream summary: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-46565 CVE-2025-43970 CVE-2025-43971 CVE-2025-43972 CVE-2025-43973 CVE-2025-7464 CVE-2026-30405 CVE-2026-37461 +8 more Upstream summary: Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0821-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 CVE-2023-33461 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-26601 CVE-2025-49175 CVE-2024-31080 CVE-2024-9632 CVE-2025-49176 CVE-2025-49179 CVE-2025-49180 CVE-2025-49177 +1 more Upstream summary: pkgsrc audit-packages flagged modular-xorg-xwayland<24.1.6 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-26601 Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14537-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5115 CVE-2023-5764 CVE-2024-0690 CVE-2024-11079 CVE-2024-8775 CVE-2024-9902 Upstream summary: An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15143-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-4664 CVE-2024-7971 CVE-2024-6772 CVE-2024-6773 CVE-2024-6774 CVE-2024-6775 CVE-2024-6776 CVE-2024-6777 +12 more Upstream summary: Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:1357-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11490 CVE-2023-48161 CVE-2026-23868 CVE-2015-7555 CVE-2016-3977 CVE-2019-15133 CVE-2022-28506 CVE-2021-40633 Upstream summary: The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c […]
