🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35444 CVE-2017-14442 CVE-2017-2887 CVE-2018-3977 CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14448 +9 more Upstream summary: SDL_image is a library to load images of various formats as SDL surfaces. […]
🟡 Medium ⏱ 10–30 min Last verified: 23 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-10744 CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 CVE-2021-3583 CVE-2021-3620 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as […]
🟡 Medium ⏱ 10–30 min Last verified: 23 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-0876 CVE-2012-1148 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42151 CVE-2026-42154 CVE-2026-40179 CVE-2019-10215 CVE-2021-29622 Upstream summary: Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret […]
🟢 Low ⏱ 5–15 min Last verified: 23 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24724 CVE-2022-39209 Upstream summary: cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table […]
🟢 Low ⏱ 5–15 min Last verified: 23 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2785 Upstream summary: The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary code via a […]
🟡 Medium ⏱ 10–30 min Last verified: 23 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10540 CVE-2022-3517 CVE-2026-26996 CVE-2026-27903 CVE-2026-27904 Upstream summary: Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5079420 • MSRC update-guide entry Related CVEs: CVE-2026-23669 CVE-2026-23671 CVE-2026-23672 CVE-2026-23673 CVE-2026-24285 CVE-2026-24289 CVE-2026-24291 CVE-2026-24294 +12 more Affected components: Windows Server 2016 Microsoft summary: Use after free in RPC Runtime allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 23 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2262 CVE-2010-2435 CVE-2010-3306 CVE-2011-0529 CVE-2023-46586 Upstream summary: Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service (crash) via a crafted Range header. […]
🟢 Low ⏱ 5–15 min Last verified: 23 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2653 Upstream summary: arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root […]
