🟢 Low ⏱ 5–15 min Last verified: 7 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unzip — permission race vulnerability Related CVEs: CVE-2005-2475 Upstream summary: Imran Ghory reports a vulnerability within unzip. The vulnerability is caused by a race condition between extracting an archive and […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1547 Related CVEs: CVE-2026-4775 CVE-2025-61143 CVE-2025-61144 CVE-2025-9900 CVE-2022-3570 CVE-2022-3598 CVE-2022-48281 CVE-2023-30775 +12 more Upstream summary: A flaw was found in the libtiff library. A remote attacker could exploit a signed […]
🟡 Medium ⏱ 10–30 min Last verified: 7 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the NIFF […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 8.0.2-r0 📖 ~4 min read • Source: Alpine secdb entry — suricata 8.0.2-r0 Related CVEs: CVE-2025-64344 CVE-2025-64333 CVE-2025-64332 CVE-2025-64331 CVE-2025-64330 CVE-2025-64335 CVE-2025-64334 CVE-2025-59147 +12 more Upstream summary: Alpine community repository for vedge ships suricata 8.0.2-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 7 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: serendipity — XSS Related CVEs: CVE-2008-1385 CVE-2008-1386 CVE-2019-11870 Upstream summary: MITRE: Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the […]
🟢 Low ⏱ 5–15 min Last verified: 7 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Jupyter Notebook — vulnerability Related CVEs: CVE-2018-8768 Upstream summary: MITRE reports: In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook […]
🟢 Low ⏱ 5–15 min Last verified: 7 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Mozilla — Stored passwords in 'Saved Logins' can be copied without master password entry Related CVEs: CVE-2019-11733 Upstream summary: Mozilla Foundation reports: CVE-2019-11733: Stored passwords in 'Saved Logins' can be […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 46.0.7-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-cryptography 46.0.7-r0 Related CVEs: CVE-2026-34073 CVE-2026-39892 CVE-2026-26007 CVE-2023-38325 CVE-2023-23931 CVE-2020-36242 CVE-2020-25659 Upstream summary: Alpine main repository for vedge ships py3-cryptography 46.0.7-r0 which addresses CVE-2026-34073. Table […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5052040 • MSRC update-guide entry Related CVEs: CVE-2025-21376 CVE-2025-26634 CVE-2025-21352 CVE-2025-21368 CVE-2025-21369 CVE-2025-21375 CVE-2025-21391 CVE-2025-21418 +12 more Affected components: Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 7 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1413 CVE-2006-1168 CVE-2010-0001 Upstream summary: Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP […]
