🟠 High ⏱ 15–60 min Last verified: 7 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2273 CVE-2010-2274 CVE-2010-2275 CVE-2018-1000665 CVE-2018-15494 CVE-2018-6561 CVE-2019-10785 CVE-2020-4051 +3 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:13515 Related CVEs: CVE-2026-33554 Upstream summary: The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0468 CVE-2003-0540 CVE-2005-0337 CVE-2008-2936 CVE-2008-2937 CVE-2008-3889 CVE-2009-2939 CVE-2011-0411 +3 more Upstream summary: Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos […]
🟡 Medium ⏱ 10–30 min Last verified: 7 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3885 CVE-2015-8366 CVE-2026-24808 Upstream summary: Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6409 Upstream summary: Debian adequate before 0.8.1, when run by root with the –user option, allows local users to hijack the tty and possibly gain privileges via the […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2120 Upstream summary: The %{password(…)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0220-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22701 CVE-2025-68146 Upstream summary: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1086 Related CVEs: CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-45801 CVE-2024-47875 CVE-2024-48910 CVE-2025-15599 CVE-2025-26791 CVE-2025-48050 CVE-2026-0540 CVE-2026-41238 +2 more Upstream summary: DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-36489 Upstream summary: Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon. Table of contents Symptom […]
