🟢 Low ⏱ 5–15 min Last verified: 25 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4129 Upstream summary: CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0941 CVE-2004-0990 CVE-2006-2906 CVE-2006-4484 CVE-2007-0455 CVE-2007-1001 CVE-2007-2445 CVE-2007-2756 +12 more Upstream summary: Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 25 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8981 CVE-2017-5852 CVE-2017-5853 CVE-2017-5854 CVE-2017-5855 CVE-2017-5886 CVE-2017-6840 CVE-2017-6841 +12 more Upstream summary: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0120 Upstream summary: adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. resolves […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8805 Upstream summary: Debian ftpsync before 20171017 does not use the rsync –safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-28243 CVE-2024-28244 CVE-2024-28245 CVE-2024-28246 CVE-2025-23207 Upstream summary: KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter […]
🟠 High ⏱ 15–60 min Last verified: 24 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29946 CVE-2023-46129 CVE-2023-47090 CVE-2025-30215 CVE-2026-27571 CVE-2026-27889 CVE-2026-29785 CVE-2026-33215 +9 more Upstream summary: NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 24 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-8242 Upstream summary: librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack. […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1804 CVE-2008-0008 CVE-2009-1299 CVE-2009-1894 CVE-2014-3970 Upstream summary: PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent […]
