🟠 High ⏱ 15–60 min Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1757 CVE-2010-0012 CVE-2010-0748 CVE-2010-0749 CVE-2010-1853 CVE-2012-4037 CVE-2012-6129 CVE-2014-4909 +2 more Upstream summary: Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-48383 Upstream summary: Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11675 Upstream summary: The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might let local users obtain root access because of unsafe interaction […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5058405 • MSRC update-guide entry Related CVEs: CVE-2025-29966 CVE-2025-29967 CVE-2025-29833 CVE-2025-55229 CVE-2025-47955 CVE-2025-47969 CVE-2025-29959 CVE-2025-29960 +12 more Affected components: Windows Server 2025 Microsoft summary: Heap-based buffer overflow in Windows Remote Desktop allows […]
Prometheus is a time-series metrics collection and alerting system widely used for monitoring cloud infrastructure and web servers. The nginx-prometheus-exporter (nginx-exporter) is a lightweight Go binary that reads Nginx’s built-in stub_status page and exposes the metrics in Prometheus format — active connections, total requests, connection states (reading, writing, waiting), and request rate. Combined with Grafana […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-12290 CVE-2019-18224 Upstream summary: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-4156 Upstream summary: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read […]
A default Nginx installation serves content, but many security hardening steps are not enabled by default. Hardening Nginx means configuring HTTP security headers to prevent XSS, clickjacking, and MIME sniffing attacks; enforcing TLS 1.3 and strong cipher suites to eliminate outdated protocol vulnerabilities; enabling OCSP Stapling so clients can verify certificate validity without a round-trip […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:6628 Related CVEs: CVE-2025-15270 CVE-2025-15269 CVE-2025-15275 CVE-2025-15279 Upstream summary: FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5155 CVE-2018-17942 Upstream summary: In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of […]
