🟡 Medium ⏱ 10–30 min Last verified: 25 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-32096 CVE-2022-38493 CVE-2024-25714 Upstream summary: Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29582 Upstream summary: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15271 Upstream summary: In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown […]
🟢 Low ⏱ 5–15 min Last verified: 25 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10749 Upstream summary: A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious […]
🟠 High ⏱ 15–60 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2018-20721 CVE-2021-46141 CVE-2021-46142 CVE-2024-34402 CVE-2024-34403 +4 more Upstream summary: An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6354 CVE-2007-6355 CVE-2007-6356 CVE-2023-50671 CVE-2024-42851 Upstream summary: Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an […]
🟡 Medium ⏱ 10–30 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5200 CVE-2024-25442 CVE-2024-25443 CVE-2024-25445 CVE-2024-25446 Upstream summary: hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via […]
🟢 Low ⏱ 5–15 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0771 Upstream summary: Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the […]
🟠 High ⏱ 15–60 min Last verified: 24 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14032 CVE-2017-18187 CVE-2017-2784 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 CVE-2018-1000520 +12 more Upstream summary: ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 23 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69412 Upstream summary: KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data. […]
