Debian 11

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-13822 CVE-2020-28498 CVE-2024-42459 CVE-2024-42460 CVE-2024-42461 CVE-2024-48948 CVE-2024-48949 CVE-2025-14505 Upstream summary: The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2851 CVE-2007-0472 CVE-2007-0473 CVE-2007-0474 CVE-2007-0475 CVE-2014-2581 CVE-2017-8849 CVE-2025-66002  +1 more Upstream summary: smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-46392 Upstream summary: Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-23914 CVE-2020-23915 CVE-2025-9136 CVE-2025-9809 Upstream summary: An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-40905 Upstream summary: WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-41066 Upstream summary: Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system. To exploit […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-11149 Upstream summary: This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-26819 Upstream summary: Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-61982 Upstream summary: An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-0065 CVE-2025-66004 Upstream summary: Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a […]