🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-4750 Upstream summary: Out-of-bounds Read vulnerability in fabiangreffrath woof.This issue affects woof: before woof_15.3.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-json — Unsafe Objection Creation Vulnerability in JSON (Additional fix) Related CVEs: CVE-2020-10663 Upstream summary: When parsing certain JSON documents, the json gem (including the one bundled with Ruby) can […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5065426 • MSRC update-guide entry Related CVEs: CVE-2025-54918 CVE-2025-55226 CVE-2025-55228 CVE-2025-55236 CVE-2025-53799 CVE-2025-53800 CVE-2025-55224 CVE-2025-48807 +12 more Affected components: Windows Server 2025 Microsoft summary: Improper authentication in Windows NTLM allows an authorized […]
🟡 Medium ⏱ 10–30 min Last verified: 20 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2380 CVE-2008-2667 CVE-2021-28374 Upstream summary: SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 21.0.9_p10-r0 📖 ~4 min read • Source: Alpine secdb entry — openjdk21 21.0.9_p10-r0 Related CVEs: CVE-2025-53066 CVE-2025-53057 CVE-2025-61748 CVE-2025-50059 CVE-2025-30749 CVE-2025-50106 CVE-2025-30754 CVE-2025-23083 +12 more Upstream summary: Alpine community repository for vedge ships openjdk21 21.0.9_p10-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69261 Upstream summary: WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instance/memory.h` can wrap, causing `checkAccessBound()` to incorrectly allow the access. This leads to a […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PEAR — Net_Ping and Net_Traceroute remote arbitrary command injection Related CVEs: CVE-2009-4024 CVE-2009-4025 Upstream summary: PEAR Security Advisory reports: Multiple remote arbitrary command injections have been found in the Net_Ping […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-6196 Upstream summary: A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:7666 Related CVEs: CVE-2026-27135 Upstream summary: libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: Denial of Service via […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-6104 Upstream summary: go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials […]
