🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2538 Upstream summary: Cross-site scripting (XSS) vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:12310 Related CVEs: CVE-2026-35535 Upstream summary: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5846 CVE-2017-5847 CVE-2023-38103 CVE-2023-38104 CVE-2026-2920 CVE-2026-2922 Upstream summary: The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0007 Upstream summary: pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on (1) pimd.dump when a USR1 signal […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:7384 Related CVEs: CVE-2026-4631 Upstream summary: Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟢 Low ⏱ 5–15 min Last verified: 18 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0564 Upstream summary: Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29946 CVE-2023-47090 CVE-2025-30215 CVE-2026-27571 CVE-2026-27889 CVE-2026-29785 CVE-2026-33215 CVE-2026-33216 +8 more Upstream summary: NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8103-2 Related CVEs: CVE-2025-55304 https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/2144731 CVE-2026-27596 CVE-2026-25884 CVE-2020-18899 CVE-2025-54080 CVE-2026-27631 CVE-2020-18771 Upstream summary: USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8156-1 Related CVEs: CVE-2026-5201 CVE-2025-6199 CVE-2025-7345 CVE-2022-48622 Upstream summary: It was discovered that GDK-PixBuf incorrectly handled certain JPEG files. An attacker could use this issue to cause GDK-PixBuf to crash, […]
