🟢 Low ⏱ 5–15 min Last verified: 3 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-37794 CVE-2024-37795 Upstream summary: Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 3 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4949 Upstream summary: dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to […]
🟠 High ⏱ 15–60 min Last verified: 2 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19886 CVE-2019-25043 CVE-2020-15598 CVE-2021-42717 CVE-2022-48279 CVE-2023-28882 CVE-2023-38285 CVE-2024-1019 +3 more Upstream summary: Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent […]
🟡 Medium ⏱ 10–30 min Last verified: 2 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9773 CVE-2016-4478 CVE-2017-6384 CVE-2022-24976 Upstream summary: modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1053 CVE-2005-0117 Upstream summary: Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line option or (2) XSHISENLIB environment variable. […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-25189 Upstream summary: libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 2 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11683 CVE-2026-4177 CVE-2026-5089 Upstream summary: YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads […]
🟡 Medium ⏱ 10–30 min Last verified: 2 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0774 CVE-2007-1860 CVE-2008-5519 CVE-2014-8111 CVE-2018-11759 CVE-2023-41081 CVE-2024-46544 Upstream summary: Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and […]
🟠 High ⏱ 15–60 min Last verified: 2 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1287 CVE-2005-1194 CVE-2008-2719 CVE-2008-7177 CVE-2017-10686 CVE-2017-11111 CVE-2017-14228 CVE-2017-17810 +12 more Upstream summary: Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute […]
🟡 Medium ⏱ 10–30 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-10031 CVE-2014-125112 CVE-2025-40923 Upstream summary: Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
