🟢 Low ⏱ 5–15 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6110 Upstream summary: bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23368 CVE-2021-23382 CVE-2021-23566 CVE-2023-44270 CVE-2024-55565 CVE-2026-41305 Upstream summary: The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5740 CVE-2013-4584 Upstream summary: The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2175 CVE-2018-11797 CVE-2018-8036 CVE-2021-31811 CVE-2021-31812 CVE-2026-23907 CVE-2026-33929 Upstream summary: Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 29 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3146 CVE-2018-19787 CVE-2020-27783 CVE-2021-28957 CVE-2021-43818 CVE-2022-2309 CVE-2026-41066 Upstream summary: Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) […]
🟢 Low ⏱ 5–15 min Last verified: 28 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-2644 Upstream summary: A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the library core/SolverTypes.h of the component DIMACS File […]
🟢 Low ⏱ 5–15 min Last verified: 28 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-47068 CVE-2026-27606 Upstream summary: Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts […]
🟢 Low ⏱ 5–15 min Last verified: 28 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-12087 Upstream summary: An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data […]
🟠 High ⏱ 15–60 min Last verified: 28 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-39908 CVE-2024-41123 CVE-2024-41946 CVE-2024-43398 CVE-2024-49761 CVE-2025-24294 CVE-2025-25186 CVE-2025-27219 +12 more Upstream summary: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities […]
🟡 Medium ⏱ 10–30 min Last verified: 28 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7271 CVE-2014-7272 CVE-2015-0856 CVE-2018-14345 CVE-2020-28049 Upstream summary: Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication. Table of contents […]
