🟢 Low ⏱ 5–15 min Last verified: 10 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1626 Upstream summary: XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3575 CVE-2009-3617 CVE-2010-1512 CVE-2019-3500 CVE-2026-8367 Upstream summary: Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) […]
🟢 Low ⏱ 5–15 min Last verified: 10 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-1991 Upstream summary: A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c of the component UVC Descriptor Handler. The […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-6070 CVE-2020-6104 CVE-2020-6105 CVE-2020-6106 CVE-2020-6107 CVE-2020-6108 Upstream summary: An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4433 CVE-2018-10111 CVE-2018-10112 CVE-2018-10113 CVE-2018-10114 CVE-2021-45463 CVE-2025-10921 CVE-2026-2049 +1 more Upstream summary: Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1885 CVE-2012-0880 CVE-2015-0252 CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 CVE-2017-12627 CVE-2018-1311 +1 more Upstream summary: Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:0642-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10916 Upstream summary: It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a […]
🟠 High ⏱ 15–60 min Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-20478 Upstream summary: In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10711 (see also SUSE bugzilla) Related CVEs: CVE-2026-4786 CVE-2026-6100 CVE-2026-4224 CVE-2026-1299 CVE-2025-11468 CVE-2026-0672 CVE-2026-1502 CVE-2026-3446 +10 more Upstream summary: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could […]
🟡 Medium ⏱ 10–30 min Last verified: 10 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:744-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14853 CVE-2019-14859 Upstream summary: An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or […]
