🟢 Low ⏱ 5–15 min Last verified: 30 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18641 Upstream summary: In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-4427 CVE-2023-38060 CVE-2024-32491 CVE-2024-32493 CVE-2024-48937 CVE-2024-48938 CVE-2025-26842 CVE-2025-26844 +7 more Upstream summary: Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15168 CVE-2022-0235 Upstream summary: node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1991 CVE-2013-2000 Upstream summary: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4616 Upstream summary: Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-7220 Upstream summary: Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4570 CVE-2016-4571 CVE-2018-20004 CVE-2018-20005 CVE-2018-20592 CVE-2018-20593 CVE-2026-5037 Upstream summary: The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1444 Upstream summary: netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6061 CVE-2009-0490 CVE-2009-3560 CVE-2009-3720 CVE-2016-2540 CVE-2016-2541 CVE-2020-11867 Upstream summary: Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-7938 CVE-2020-14931 CVE-2024-31837 Upstream summary: Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or […]
