🟡 Medium ⏱ 10–30 min Last verified: 30 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5119 CVE-2019-20184 CVE-2023-32784 Upstream summary: The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and […]
🟠 High ⏱ 15–60 min Last verified: 30 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2000-1254 CVE-2002-0655 CVE-2002-0656 CVE-2002-0657 CVE-2002-0659 CVE-2002-1568 CVE-2003-0078 CVE-2003-0131 +12 more Upstream summary: crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, […]
🟠 High ⏱ 15–60 min Last verified: 30 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1377 CVE-2004-1138 CVE-2005-0069 CVE-2005-2368 CVE-2007-2438 CVE-2007-2953 CVE-2008-2712 CVE-2008-3074 +12 more Upstream summary: vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the […]
🟠 High ⏱ 15–60 min Last verified: 30 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1183 CVE-2004-1307 CVE-2004-1308 CVE-2005-1544 CVE-2005-2452 +12 more Upstream summary: Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-3884 Upstream summary: Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-5704 Upstream summary: Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000052 Upstream summary: fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption (SIGSEGV), CWE-134 vulnerability in fmt::print() library function that can result in Denial of […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8400 CVE-2018-16789 Upstream summary: The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26112 Upstream summary: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)((.*)). **Note:** This is only exploitable […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1107 CVE-2012-1108 CVE-2012-1584 CVE-2012-2396 CVE-2017-12678 CVE-2018-11439 CVE-2023-47466 Upstream summary: The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service […]
