🟠 High ⏱ 15–60 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10768 CVE-2019-14863 CVE-2020-7676 CVE-2022-25844 CVE-2022-25869 CVE-2023-26116 CVE-2023-26117 CVE-2023-26118 +8 more Upstream summary: In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of […]
🟡 Medium ⏱ 10–30 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3369 CVE-2011-3361 CVE-2011-4923 CVE-2011-5081 Upstream summary: CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15928 CVE-2017-16229 Upstream summary: In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the […]
🟠 High ⏱ 15–60 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0048 CVE-2003-0069 CVE-2004-1008 CVE-2004-1440 CVE-2005-0467 CVE-2006-7162 CVE-2011-4607 CVE-2013-4206 +12 more Upstream summary: PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25576 Upstream summary: An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1272 Upstream summary: Buffer overflow in the save_embedded_address function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message. Table […]
🟠 High ⏱ 15–60 min Last verified: 9 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3737 CVE-2005-3885 CVE-2007-1463 CVE-2007-1464 CVE-2012-5656 CVE-2012-6076 CVE-2021-42700 CVE-2021-42702 +2 more Upstream summary: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 9 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28154 CVE-2024-43788 CVE-2025-68157 CVE-2025-68458 Upstream summary: Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property […]
🟢 Low ⏱ 5–15 min Last verified: 9 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-55566 Upstream summary: ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files […]
🟡 Medium ⏱ 10–30 min Last verified: 9 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29248 CVE-2022-31042 CVE-2022-31043 CVE-2022-31090 CVE-2022-31091 Upstream summary: Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The […]
