🟢 Low ⏱ 5–15 min Last verified: 15 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5694 CVE-2015-5695 Upstream summary: Designate does not enforce the DNS protocol limit concerning record set sizes Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-30130 CVE-2023-48795 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 CVE-2026-32935 CVE-2026-40194 CVE-2026-44167 Upstream summary: phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35678 Upstream summary: Autobahn|Python before 20.12.3 allows redirect header injection. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3856 Upstream summary: The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4078 CVE-2009-4079 CVE-2009-4459 CVE-2011-4927 CVE-2011-4928 CVE-2011-4929 CVE-2012-0327 CVE-2012-2054 +12 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0981 CVE-2005-0397 CVE-2005-4601 CVE-2006-3743 CVE-2006-3744 CVE-2006-4144 CVE-2006-5456 CVE-2007-0770 +12 more Upstream summary: Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute […]
🟡 Medium ⏱ 10–30 min Last verified: 14 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7231 CVE-2019-3866 CVE-2022-0718 Upstream summary: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask […]
🟠 High ⏱ 15–60 min Last verified: 14 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4575 CVE-2015-4054 CVE-2015-6817 CVE-2021-3935 CVE-2025-12819 CVE-2025-2291 CVE-2026-6664 CVE-2026-6665 +2 more Upstream summary: The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-41525 Upstream summary: KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's implementation […]
🟠 High ⏱ 15–60 min Last verified: 14 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0885 CVE-2003-1294 CVE-2003-1295 CVE-2004-2655 CVE-2007-1859 CVE-2007-5585 CVE-2011-2187 CVE-2015-8025 +2 more Upstream summary: Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create […]
