🟢 Low ⏱ 5–15 min Last verified: 13 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6858 Upstream summary: Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0667 CVE-2005-0926 CVE-2005-3354 CVE-2006-2920 CVE-2007-1267 CVE-2007-2958 CVE-2017-17517 CVE-2021-37746 Upstream summary: Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45139 CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-45296 CVE-2026-4867 CVE-2026-4923 CVE-2026-4926 Upstream summary: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-22868 Upstream summary: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-35515 Upstream summary: Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-35338 CVE-2026-35339 CVE-2026-35340 CVE-2026-35341 CVE-2026-35342 CVE-2026-35343 CVE-2026-35344 CVE-2026-35345 +12 more Upstream summary: A vulnerability in the chmod utility of uutils coreutils allows users to bypass the –preserve-root safety […]
🟠 High ⏱ 15–60 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0038 CVE-2005-0428 CVE-2005-2301 CVE-2005-2302 CVE-2006-4251 CVE-2008-3337 CVE-2008-5277 CVE-2012-0206 +12 more Upstream summary: The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11143 CVE-2025-1948 CVE-2025-5115 CVE-2026-1605 CVE-2026-2332 CVE-2026-5795 Upstream summary: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0050 CVE-2015-1783 CVE-2021-28091 CVE-2025-46404 CVE-2025-46705 CVE-2025-46784 CVE-2025-47151 Upstream summary: Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote […]
