🟠 High ⏱ 15–60 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1336 CVE-2014-6053 CVE-2018-20021 CVE-2018-20022 CVE-2018-7225 CVE-2019-15678 CVE-2019-15679 CVE-2019-15680 +2 more Upstream summary: TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 CVE-2005-0891 CVE-2005-2975 CVE-2005-2976 CVE-2005-3186 CVE-2007-0010 +6 more Upstream summary: Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3701 CVE-2021-4041 Upstream summary: A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32050 CVE-2026-6811 Upstream summary: Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-40897 Upstream summary: Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-37788 Upstream summary: goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10127 CVE-2016-10149 CVE-2017-1000246 CVE-2017-1000433 CVE-2020-5390 CVE-2021-21238 CVE-2021-21239 Upstream summary: PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response. […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5150 Upstream summary: sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-33070 CVE-2022-48468 Upstream summary: Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial […]
