🟠 High ⏱ 15–60 min Last verified: 12 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0227 CVE-2008-1381 CVE-2008-3880 CVE-2008-3881 CVE-2008-3882 CVE-2008-6755 CVE-2008-6756 CVE-2013-0232 +12 more Upstream summary: Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5657 CVE-2010-3443 CVE-2011-3354 CVE-2013-4422 CVE-2013-6404 CVE-2014-8483 CVE-2015-2778 CVE-2015-2779 +6 more Upstream summary: CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21670 CVE-2025-7969 Upstream summary: markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-27478 Upstream summary: libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0885 Upstream summary: checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a — (dash dash) in a username. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-42771 Upstream summary: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1347 CVE-2004-0884 CVE-2005-0373 CVE-2006-1721 CVE-2009-0688 CVE-2013-4122 CVE-2019-19906 CVE-2022-24407 Upstream summary: Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5946 CVE-2018-1000544 CVE-2019-16892 Upstream summary: The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip […]
🟢 Low ⏱ 5–15 min Last verified: 11 March 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13091 Upstream summary: pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4111 CVE-2006-4112 CVE-2007-3227 CVE-2007-5379 CVE-2007-5380 CVE-2007-6077 CVE-2008-4094 CVE-2008-5189 +12 more Upstream summary: Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" […]
