🟠 High ⏱ 15–60 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11509 CVE-2017-6369 CVE-2025-54989 CVE-2025-65104 CVE-2026-27890 CVE-2026-28212 CVE-2026-28214 CVE-2026-28224 +4 more Upstream summary: An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-22049 CVE-2025-68696 Upstream summary: httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1000236 Upstream summary: Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 +12 more Upstream summary: The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9474 Upstream summary: Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str. […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-34623 Upstream summary: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-2383 CVE-2008-7220 Upstream summary: The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4321 CVE-2009-0362 CVE-2009-5023 CVE-2012-5642 CVE-2013-2178 CVE-2013-7176 CVE-2013-7177 CVE-2021-32749 Upstream summary: fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2013-1439 CVE-2013-2126 CVE-2015-3885 CVE-2015-8366 CVE-2015-8367 CVE-2017-13735 CVE-2017-14265 +12 more Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-39882 Upstream summary: OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without […]
