🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5152 Upstream summary: inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file. Table […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1275 CVE-2009-5067 Upstream summary: Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input." Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.9.21-r0 📖 ~4 min read • Source: Alpine secdb entry — haveged 1.9.21-r0 Related CVEs: CVE-2026-41054 Upstream summary: Alpine main repository for vv3.20 ships haveged 1.9.21-r0 which addresses CVE-2026-41054. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-68142 Upstream summary: PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. Versions prior to 10.16.1 have a ReDOS bug found within the figure caption […]
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32862 CVE-2026-39377 CVE-2026-39378 Upstream summary: The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-52891 CVE-2025-47947 CVE-2025-48866 CVE-2022-48279 CVE-2025-54571 CVE-2009-5031 CVE-2012-4528 CVE-2013-1915 +2 more Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for […]
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0656 CVE-2011-0418 CVE-2011-1575 CVE-2019-20176 CVE-2020-9274 CVE-2020-9365 CVE-2021-40524 CVE-2024-48208 Upstream summary: The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2672 Upstream summary: pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary […]
🟠 High ⏱ 15–60 min Last verified: 26 January 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8182-1 Related CVEs: CVE-2026-34785 CVE-2026-26962 CVE-2026-26961 CVE-2026-34230 CVE-2026-34830 CVE-2026-34763 CVE-2026-34827 CVE-2026-32762 +12 more Upstream summary: Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:0865 Related CVEs: CVE-2025-12818 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
