@stackflag.bsky.socialCVE-2026-109708 - firefox
The networking part of Firefox and Thunderbird may allow harmful code to break out of its safe container. This could let an attacker affect other parts of the system.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-99999 - linux
The Debian Linux kernel may mishandle network packets that contain incorrect checksum information, potentially corrupting the packet header and disrupting network communication.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101341 - nsd
The NSD DNS server used in Debian can be caused to write beyond its memory limits when it processes specially crafted short text records. This can let an attacker overwrite a…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101339 - nsd
The NSD name server software from NLnet Labs and Debian can be caused to write over its own memory when it processes a specially crafted DNS record. This could let an attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101338 - nsd
The NSD DNS server can be forced to run attacker‑controlled data when it processes a specially crafted SVCB or HTTPS record that fills the expected data space. This can lead to…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101337 - nsd
If an attacker supplies a specially crafted base64 data field to NSD, the program can write up to 64 KB of attacker‑controlled data onto its internal memory stack. This risk…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-109255 - freerdp3
Debian packages freerdp2 and freerdp3 that contain FreeRDP version 3.0.0 up to 3.31 may miscalculate the size of data sent by a remote desktop server. A specially crafted…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-109245 - freerdp3
The FreeRDP client included in Debian (packages freeRDP2 and freeRDP3) does not properly verify the server's security certificate. Because of this, a network attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108553 - openrefine
The OpenRefine tool (versions up to 3.10.1) can be tricked into running system commands if a logged‑in user clicks a specially crafted link on another website. An attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-15340 - lwip smtp client
The SMTP client component of the lwIP library used in Debian does not verify how much data it receives, which could let an attacker cause the program to write beyond its…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106433 - libmongocrypt
The MongoDB libmongocrypt library can mishandle key records that contain two masterKey entries. If someone who can change those key records, or a server that…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-31433 - rootio-linux
The Linux kernel packages for Ubuntu 24.04 and related cloud builds have been updated to fix a security weakness that could let an attacker run malicious code on…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-63887 - linux
The Linux kernel’s iSCSI component can write more data than its 8 KB buffer allows, which may corrupt memory and cause the system to crash. This happens when an attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-43490 - linux
A security weakness was found in several Linux kernel packages for Ubuntu 22.04 and has been fixed in newer releases. If the packages are not updated, an attacker could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-31432 - linux
The ksmbd component in the Linux kernel could write past the allocated memory when handling combined operations like a file read followed by a security information query.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@crowncloud.bsky.socialWant privacy-focused web analytics on your own server?
Learn how to install Matomo with the LAMP stack on Debian 12 and take control of your website analytics, data, and tracking.
@stackflag.bsky.socialCVE-2026-105841 - lrzsz
The lrzsz file transfer program on Debian allows a remote sender to trick the receiving computer into executing any command by sending a specially crafted filename. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-105840 - lrzsz
The lrzsz file transfer tool on Debian allows a specially crafted ZMODEM transfer to place files outside the intended folder, potentially overwriting any file the user can…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106195 - chrome
Google Chrome on macOS and the Debian Chromium package versions earlier than 155.0.8059.39 may let a remote attacker send specially crafted network data to get around normal…
Too many irrelevant or confusing CVEs? Use stackflag.com
@crowncloud.bsky.socialLooking for a simple, self-hosted way to share code snippets?
Learn how to install OpenGist on Debian 12 and set up your own lightweight platform for creating, managing, and sharing code snippets.