🟡 Medium ⏱ 10–30 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3369 CVE-2011-3361 CVE-2011-4923 CVE-2011-5081 Upstream summary: CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:22376 (see also SUSE bugzilla) Related CVEs: CVE-2025-9714 Upstream summary: Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15928 CVE-2017-16229 Upstream summary: In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the […]
🟠 High ⏱ 15–60 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0048 CVE-2003-0069 CVE-2004-1008 CVE-2004-1440 CVE-2005-0467 CVE-2006-7162 CVE-2011-4607 CVE-2013-4206 +12 more Upstream summary: PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25576 Upstream summary: An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1272 Upstream summary: Buffer overflow in the save_embedded_address function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message. Table […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7678-1 Related CVEs: CVE-2025-40909 CVE-2024-56406 Upstream summary: It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8144-1 Related CVEs: CVE-2025-12543 Upstream summary: It was discovered that Undertow incorrectly validated the Host header in incoming HTTP requests. A remote attacker could possibly use this issue to gain […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5066874 • MSRC update-guide entry Related CVEs: CVE-2016-9535 CVE-2025-24990 CVE-2025-24052 CVE-2025-55335 CVE-2025-55700 CVE-2025-55701 CVE-2025-58717 CVE-2025-58735 +12 more Affected components: Windows Server 2016 Microsoft summary: tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions […]
🟡 Medium ⏱ 5–30 min Last verified: 10 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:1845-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11922 Upstream summary: A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out […]
