🟢 Low ⏱ 5–15 min Last verified: 8 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: iperf3 — buffer overflow Related CVEs: CVE-2016-4303 Upstream summary: ESnet reports: A malicious process can connect to an iperf3 server and, by sending a malformed message on the control channel, […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5157 Upstream summary: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service. […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-7220 CVE-2020-27511 Upstream summary: Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 8 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5497 CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304 Upstream summary: Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0167-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23013 CVE-2021-31924 CVE-2019-12209 CVE-2019-12210 Upstream summary: In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) […]
🟢 Low ⏱ 5–15 min Last verified: 8 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25638 Upstream summary: A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit […]
🟡 Medium ⏱ 10–30 min Last verified: 8 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-14722 Upstream summary: An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted […]
🟠 High ⏱ 15–60 min Last verified: 8 December 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02749-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-54351 CVE-2023-38403 CVE-2025-54349 CVE-2025-54350 CVE-2024-53580 CVE-2024-26306 Upstream summary: In iperf before 3.19.1, net.c has a buffer overflow when –skip-rx-copy is used (for MSG_TRUNC in recv). […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5072014 • MSRC update-guide entry Related CVEs: CVE-2025-62466 CVE-2025-62470 CVE-2025-62472 CVE-2025-62473 CVE-2025-62549 CVE-2025-62571 CVE-2025-62573 CVE-2025-59517 +4 more Affected components: Windows Server 2016 Microsoft summary: Null pointer dereference in Windows Client-Side Caching (CSC) […]
🟠 High ⏱ 15–60 min Last verified: 8 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4807 CVE-2005-4808 CVE-2006-2362 CVE-2008-2310 CVE-2012-3509 CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 +12 more Upstream summary: Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in […]
