2025 - Page 69 of 1252

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1999022 CVE-2020-36388 CVE-2020-36389 CVE-2021-21252 CVE-2023-25440 CVE-2023-28115 CVE-2025-3573 CVE-2025-65187 Upstream summary: PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-20291 CVE-2024-9676 Upstream summary: A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10782 CVE-2019-9658 Upstream summary: All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-53156 Upstream summary: The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments. Table of contents Symptom & Impact Environment & Reproduction Root […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2386 CVE-2004-2387 Upstream summary: Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2013-1439 CVE-2013-2126 CVE-2015-3885 CVE-2015-8366 CVE-2015-8367 CVE-2018-25017 Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0801 CVE-2010-5325 CVE-2011-2697 CVE-2011-2923 CVE-2011-2924 CVE-2011-2964 CVE-2015-8327 CVE-2015-8560 Upstream summary: Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS […]