🟢 Low ⏱ 5–15 min Last verified: 25 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3393 Upstream summary: magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library […]
🟢 Low ⏱ 5–15 min Last verified: 25 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3770 Upstream summary: The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as […]
🟡 Medium ⏱ 10–30 min Last verified: 25 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10773 CVE-2018-10774 CVE-2018-10775 Upstream summary: NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 25 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10174 Upstream summary: init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses […]
🟠 High ⏱ 15–60 min Last verified: 24 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2664 CVE-2005-2256 CVE-2006-4976 CVE-2007-2865 CVE-2007-5728 CVE-2008-5587 CVE-2011-3598 CVE-2012-1600 +6 more Upstream summary: John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16516 CVE-2022-24795 Upstream summary: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5262 CVE-2009-3994 Upstream summary: Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1628 CVE-2015-5186 Upstream summary: Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a […]
🟢 Low ⏱ 5–15 min Last verified: 24 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-47155 Upstream summary: The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 24 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10773 CVE-2019-15608 CVE-2019-5448 CVE-2020-8131 CVE-2021-4435 CVE-2025-8262 CVE-2025-9308 Upstream summary: In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem […]
