🟠 High ⏱ 15–60 min Last verified: 4 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1558 CVE-2007-6208 CVE-2010-5109 CVE-2012-4507 CVE-2014-2576 CVE-2015-8614 CVE-2015-8708 CVE-2019-10735 +3 more Upstream summary: The APOP protocol allows remote attackers to guess the first 3 characters of a password via […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-50711 Upstream summary: vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8557 CVE-2021-20270 CVE-2021-27291 CVE-2022-40896 CVE-2026-4539 Upstream summary: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27297 CVE-2024-36050 CVE-2024-38531 CVE-2024-47174 CVE-2026-39860 CVE-2026-44028 CVE-2026-44029 Upstream summary: Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3196 Upstream summary: skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1150 Upstream summary: Buffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, automatically appends an _ (underscore) to the end of duplicate nicknames, which allows remote attackers to cause […]
🟠 High ⏱ 15–60 min Last verified: 4 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-5991 CVE-2022-21821 CVE-2022-34667 CVE-2023-0193 CVE-2023-0196 CVE-2023-25510 CVE-2023-25511 CVE-2023-25512 +12 more Upstream summary: NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in […]
🟢 Low ⏱ 5–15 min Last verified: 3 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16707 Upstream summary: Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟠 High ⏱ 15–60 min Last verified: 3 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1678 CVE-2011-2724 CVE-2011-3585 CVE-2012-1586 CVE-2014-2830 CVE-2020-14342 CVE-2021-20208 CVE-2022-27239 +2 more Upstream summary: smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab […]
🟢 Low ⏱ 5–15 min Last verified: 3 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11677 CVE-2025-11678 Upstream summary: Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a […]
