🟢 Low ⏱ 5–15 min Last verified: 13 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0372 CVE-2006-7221 Upstream summary: Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0994 CVE-2006-1060 Upstream summary: Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29424 Upstream summary: The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0709 Upstream summary: Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6401 CVE-2016-4425 CVE-2020-36325 Upstream summary: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-53192 Upstream summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the […]
🟡 Medium ⏱ 10–30 min Last verified: 12 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4490 CVE-2015-1548 CVE-2017-17663 CVE-2018-18778 Upstream summary: mini_httpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5072 Upstream summary: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead […]
🟢 Low ⏱ 5–15 min Last verified: 12 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24839 Upstream summary: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users […]
🟠 High ⏱ 15–60 min Last verified: 12 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4048 CVE-2007-0017 CVE-2007-0256 CVE-2007-3316 CVE-2007-3467 CVE-2007-3468 CVE-2007-6681 CVE-2007-6682 +12 more Upstream summary: Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used […]
