🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23520 CVE-2021-23521 Upstream summary: The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5957 Upstream summary: Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-24056 Upstream summary: In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-2057 CVE-2010-1159 CVE-2014-8321 CVE-2014-8322 CVE-2014-8323 CVE-2014-8324 Upstream summary: Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets. Table […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0393 CVE-2008-5376 Upstream summary: The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-41253 Upstream summary: Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append untrusted […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-8337 Upstream summary: In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are not properly checked. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13611 Upstream summary: An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server […]
🟠 High ⏱ 15–60 min Last verified: 16 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0146 CVE-2006-0147 CVE-2006-0410 CVE-2006-0806 CVE-2006-4976 CVE-2011-3699 CVE-2016-4855 CVE-2016-7405 +3 more Upstream summary: The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12559 CVE-2018-12560 CVE-2018-12561 CVE-2018-12562 Upstream summary: An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp `mpOk()` is […]
