🟢 Low ⏱ 5–15 min Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10747 CVE-2021-23440 Upstream summary: set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype […]
🟠 High ⏱ 15–60 min Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8189 CVE-2020-8225 CVE-2020-8227 CVE-2021-22879 CVE-2021-22895 CVE-2021-32728 CVE-2022-39331 CVE-2022-39332 +12 more Upstream summary: A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local […]
🟢 Low ⏱ 5–15 min Last verified: 6 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0855 Upstream summary: The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0208 CVE-2012-0523 Upstream summary: Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, […]
🟡 Medium ⏱ 10–30 min Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14462 CVE-2019-14463 CVE-2022-0367 CVE-2024-10918 CVE-2024-36843 CVE-2024-36844 CVE-2024-36845 Upstream summary: An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the […]
🟢 Low ⏱ 5–15 min Last verified: 6 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15133 Upstream summary: In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine to implement […]
🟢 Low ⏱ 5–15 min Last verified: 5 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7032 Upstream summary: webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take […]
🟡 Medium ⏱ 10–30 min Last verified: 5 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36407 CVE-2023-6704 CVE-2025-48174 CVE-2025-48175 Upstream summary: libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 5 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-38065 Upstream summary: A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a […]
🟢 Low ⏱ 5–15 min Last verified: 5 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29167 Upstream summary: Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, […]
