🟠 High ⏱ 15–60 min Last verified: 4 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1605 CVE-2005-0490 CVE-2005-3185 CVE-2005-4077 CVE-2006-1061 CVE-2007-3564 CVE-2009-0037 CVE-2009-2417 +12 more Upstream summary: curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9430 Upstream summary: Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31525 CVE-2021-33194 CVE-2021-44716 CVE-2022-27664 CVE-2022-41717 CVE-2022-41721 CVE-2022-41723 CVE-2023-3978 +6 more Upstream summary: net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3444 CVE-2012-1176 Upstream summary: Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7947 CVE-2015-1239 CVE-2015-6581 CVE-2015-8871 CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-10507 +12 more Upstream summary: OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-25058 Upstream summary: An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-5091 Upstream summary: Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-42052 Upstream summary: Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= … %> for untrusted metadata […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13508 Upstream summary: FreeTDS through 1.1.11 has a Buffer Overflow. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2691 CVE-2006-2692 CVE-2009-1440 Upstream summary: Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown […]
