🟢 Low ⏱ 5–15 min Last verified: 4 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0393 CVE-2004-0454 Upstream summary: Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-5090 Upstream summary: Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. The html_filter function did not escape single quotes. HTML attributes inside of single […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0805 CVE-2019-7164 CVE-2019-7548 Upstream summary: Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-59432 Upstream summary: SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to version 3.2, […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14662 CVE-2019-14663 CVE-2019-14665 CVE-2020-27372 Upstream summary: Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15612 CVE-2017-16876 CVE-2022-34749 CVE-2026-33079 Upstream summary: mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35904 CVE-2025-4574 Upstream summary: An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation and […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-5583 CVE-2014-4172 CVE-2017-1000071 CVE-2022-39369 Upstream summary: phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName […]
🟠 High ⏱ 15–60 min Last verified: 3 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4575 CVE-2008-4639 CVE-2008-4640 CVE-2008-4641 CVE-2016-3822 CVE-2018-16554 CVE-2018-17088 CVE-2018-6612 +12 more Upstream summary: Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 3 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-37154 Upstream summary: check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with ${IFS}. This has been categorized both as fixed in e8810de, and […]
