🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6047 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2132 CVE-2024-5629 Upstream summary: bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1010 CVE-2006-1236 Upstream summary: Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-50658 CVE-2025-63811 Upstream summary: The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0484 CVE-2014-1419 Upstream summary: The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment." Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5986 CVE-2012-0270 CVE-2012-2106 CVE-2012-2107 CVE-2012-2108 Upstream summary: Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in […]
🟠 High ⏱ 15–60 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7075 CVE-2017-1000056 CVE-2017-1002101 CVE-2017-1002102 CVE-2018-1002100 CVE-2018-1002102 CVE-2018-1002105 CVE-2019-1002100 +12 more Upstream summary: It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-25050 CVE-2022-25051 CVE-2022-27419 CVE-2025-34450 Upstream summary: rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows attackers to cause a Denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14040 CVE-2020-28851 CVE-2020-28852 CVE-2021-38561 CVE-2022-32149 Upstream summary: The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1593 CVE-2004-1170 CVE-2004-1377 CVE-2014-0466 CVE-2015-8107 Upstream summary: The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows […]
