Debian

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-28117 Upstream summary: libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-0747 CVE-2006-1861 CVE-2006-2661 CVE-2006-3467 CVE-2007-1351 CVE-2007-2754 CVE-2007-3506 CVE-2008-1806  +12 more Upstream summary: Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) […]

🟠 High   ⏱ 15–60 min  Last verified: 15 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-4048 CVE-2006-4800 CVE-2008-3162 CVE-2008-3230 CVE-2008-4610 CVE-2008-4866 CVE-2008-4867 CVE-2009-0385  +12 more Upstream summary: Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7720 CVE-2022-24771 CVE-2022-24772 CVE-2022-24773 CVE-2025-12816 CVE-2025-66030 CVE-2025-66031 Upstream summary: The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-36133 CVE-2025-46733 CVE-2026-33317 CVE-2026-33662 Upstream summary: The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8789 CVE-2015-8790 CVE-2015-8791 CVE-2019-13615 CVE-2021-3405 CVE-2023-52339 Upstream summary: Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-0275 CVE-2013-1770 CVE-2013-6395 CVE-2015-6816 CVE-2019-20378 CVE-2019-20379 CVE-2024-52762 CVE-2024-52763 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4960 Upstream summary: impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-7776 CVE-2026-27489 CVE-2026-28500 CVE-2026-34445 CVE-2026-34446 CVE-2026-34447 Upstream summary: A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite […]