🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Out-of-bounds memory access Related CVEs: CVE-2025-32414 Upstream summary: [email protected] reports: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
🟡 Medium ⏱ 10–30 min Last verified: 16 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1655 CVE-2007-1958 CVE-2007-1959 Upstream summary: Buffer overflow in the fun_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service (crash) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 4.2.0-r0 📖 ~4 min read • Source: Alpine secdb entry — kpmcore 4.2.0-r0 Related CVEs: CVE-2020-27187 Upstream summary: Alpine community repository for vv3.20 ships kpmcore 4.2.0-r0 which addresses CVE-2020-27187. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 16 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 CVE-2019-20387 CVE-2021-3200 CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 +4 more Upstream summary: There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7692 CVE-2021-22573 Upstream summary: PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5066738 • MSRC update-guide entry Related CVEs: CVE-2025-55248 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft summary: Inadequate encryption strength in .NET.NET Framework, Visual Studio allows an […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-52949 Upstream summary: iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-53161 Upstream summary: The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
