🟢 Low ⏱ 5–15 min Last verified: 9 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-31072 Upstream summary: The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization. The unmarshal_object function […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Upstream summary: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25099 CVE-2025-40912 CVE-2025-40914 CVE-2026-41564 Upstream summary: In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8157-1 Related CVEs: CVE-2026-33526 CVE-2026-33515 CVE-2026-32748 CVE-2025-62168 CVE-2025-59362 CVE-2024-37894 CVE-2023-49288 CVE-2023-5824 +12 more Upstream summary: It was discovered that Squid incorrectly handled certain ICP traffic. In environments where ICP support […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8103-1 Related CVEs: CVE-2026-27596 CVE-2026-25884 CVE-2020-18899 CVE-2025-55304 CVE-2025-54080 CVE-2026-27631 CVE-2020-18771 CVE-2021-32815 +12 more Upstream summary: It was discovered that Exiv2 did not correctly handle reading certain buffers. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-filelock<3.20.1 for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68146 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7544-1 Related CVEs: CVE-2025-47273 CVE-2024-6345 CVE-2022-40897 Upstream summary: It was discovered that setuptools did not properly sanitize paths. An attacker could possibly use this issue to write files to arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7998-1 Related CVEs: CVE-2026-21932 CVE-2026-21933 CVE-2026-21925 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-50106 CVE-2025-30754 +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 17 would establish RMI TCP endpoint […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5052042 • MSRC update-guide entry Related CVEs: CVE-2025-21376 CVE-2025-21352 CVE-2025-21368 CVE-2025-21369 CVE-2025-21375 CVE-2025-21418 CVE-2025-21419 CVE-2025-21420 +12 more Affected components: Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2854-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000518 Upstream summary: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured […]
