🟢 Low ⏱ 5–15 min Last verified: 23 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: syncthing — crash due to malformed relay protocol message Related CVEs: CVE-2021-21404 Upstream summary: syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1627 Related CVEs: CVE-2026-26171 CVE-2026-32178 CVE-2026-32203 CVE-2026-33116 CVE-2026-40372 Upstream summary: Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. (CVE-2026-26171) Improper neutralization of special […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-11468 CVE-2018-11503 CVE-2018-11504 CVE-2018-12495 CVE-2026-35201 CVE-2026-4833 Upstream summary: The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000825 Upstream summary: FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-12183 CVE-2025-66566 Upstream summary: Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-23949 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-jaraco.context<6.1.0 for vulnerability class 'directory-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23949 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40897 CVE-2024-6345 CVE-2025-47273 CVE-2026-23949 Upstream summary: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: munge — CWE-787: Out-of-bounds Write Related CVEs: CVE-2026-25506 Upstream summary: https://github.com/dun/munge/security/advisories/GHSA-r9cr-jf4v-75gh reports: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Text::CSV_XS — CWE-825 Expired Pointer Dereference Related CVEs: CVE-2026-7111 Upstream summary: H.Merijn Brand – Tux <[email protected]> reports: Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5075999 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21235 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
