🟠 High ⏱ 15–60 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1557 CVE-2004-0796 CVE-2005-1266 CVE-2005-3351 CVE-2006-2447 CVE-2007-0451 CVE-2007-2873 CVE-2017-15705 +7 more Upstream summary: Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows […]
🟠 High ⏱ 15–60 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-9252 CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-18183 CVE-2017-18184 +11 more Upstream summary: An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in […]
🟠 High ⏱ 15–60 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4770 CVE-2007-4771 CVE-2008-1036 CVE-2009-0153 CVE-2011-4599 CVE-2013-0900 CVE-2013-1569 CVE-2013-2383 +12 more Upstream summary: libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the […]
🟢 Low ⏱ 5–15 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4478 CVE-2013-4479 Upstream summary: Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment. […]
🟡 Medium ⏱ 10–30 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17571 CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2026-34480 Upstream summary: Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited […]
🟢 Low ⏱ 5–15 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0302 Upstream summary: Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current […]
🟢 Low ⏱ 5–15 min Last verified: 16 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-5238 Upstream summary: The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table […]
🟢 Low ⏱ 5–15 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3331 Upstream summary: viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1580 CVE-2004-1012 CVE-2004-1013 CVE-2019-11356 CVE-2019-18928 CVE-2019-19783 CVE-2021-32056 CVE-2021-33582 +1 more Upstream summary: Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 16 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2753 CVE-2015-2754 CVE-2015-2776 CVE-2017-2923 CVE-2017-2924 CVE-2018-7435 CVE-2018-7436 CVE-2018-7437 +2 more Upstream summary: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly […]
