🟠 High ⏱ 15–60 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-5036 CVE-2012-6109 CVE-2013-0183 CVE-2013-0184 CVE-2013-0262 CVE-2013-0263 CVE-2015-3225 CVE-2018-16471 +12 more Upstream summary: Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1068 CVE-2013-1664 CVE-2013-4183 CVE-2013-4202 CVE-2014-3641 CVE-2014-7230 CVE-2015-1851 CVE-2015-5162 +5 more Upstream summary: The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) […]
🟢 Low ⏱ 5–15 min Last verified: 15 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-57868 Upstream summary: Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API […]
🟢 Low ⏱ 5–15 min Last verified: 15 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-52354 Upstream summary: chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1388 CVE-2013-2038 CVE-2018-17937 CVE-2025-67268 CVE-2025-67269 Upstream summary: Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4931 Upstream summary: gpw generates shorter passwords than required Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1215 CVE-2005-2231 CVE-2006-3121 CVE-2006-3815 CVE-2009-3736 Upstream summary: Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute […]
🟢 Low ⏱ 5–15 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0087 CVE-2026-25068 Upstream summary: The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14604 CVE-2019-11461 CVE-2022-37290 Upstream summary: GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0974 CVE-2008-5718 CVE-2018-1160 CVE-2021-31439 CVE-2022-0194 CVE-2022-22995 CVE-2022-23121 CVE-2022-23122 +12 more Upstream summary: The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows […]
