🟡 Medium ⏱ 10–30 min Last verified: 28 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0160 CVE-2005-0161 CVE-2015-2063 Upstream summary: Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3908 Upstream summary: The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5050013 • MSRC update-guide entry Related CVEs: CVE-2025-21294 CVE-2025-21295 CVE-2025-21296 CVE-2025-21298 CVE-2025-21307 CVE-2025-21411 CVE-2025-21413 CVE-2025-21210 +12 more Affected components: Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0846 Upstream summary: django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8096 Related CVEs: CVE-2025-40909 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have […]
🟠 High ⏱ 15–60 min Last verified: 28 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1330 CVE-2011-4838 CVE-2012-5370 CVE-2015-3900 CVE-2017-17742 CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000075 +12 more Upstream summary: The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not […]
🟡 Medium ⏱ 10–30 min Last verified: 28 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-3846 CVE-2018-3847 CVE-2018-3848 CVE-2018-3849 CVE-2019-1010060 Upstream summary: In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5051972 • MSRC update-guide entry Related CVEs: CVE-2025-21377 Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-29197 Upstream summary: guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (n) […]
🟢 Low ⏱ 5–15 min Last verified: 28 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0850 CVE-2010-0751 Upstream summary: The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets." […]
