🟢 Low ⏱ 5–15 min Last verified: 11 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-62672 Upstream summary: rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact. This occurs in memcpy in […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17626 CVE-2019-19450 CVE-2020-28463 CVE-2023-33733 Upstream summary: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7501 Upstream summary: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2655 CVE-2010-0301 Upstream summary: lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-6472 CVE-2019-6473 CVE-2019-6474 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 CVE-2026-3608 Upstream summary: A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31582 CVE-2023-51775 CVE-2024-29371 Upstream summary: jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4440 CVE-2013-4441 CVE-2013-4442 Upstream summary: Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2007 CVE-2005-2147 CVE-2005-3980 CVE-2005-4065 CVE-2005-4305 CVE-2005-4644 CVE-2006-2106 CVE-2006-3695 +9 more Upstream summary: Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-13939 Upstream summary: String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45897 Upstream summary: exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
