Debian

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-1807 CVE-2007-3215 CVE-2015-8476 CVE-2016-10033 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 CVE-2020-13625  +2 more Upstream summary: The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-17134 Upstream summary: Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-69993 Upstream summary: Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. This method renders user-supplied input as raw HTML without […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-68920 Upstream summary: C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-26284 CVE-2024-32875 CVE-2024-55601 CVE-2026-35166 CVE-2026-44301 Upstream summary: Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-6472 CVE-2019-6473 CVE-2019-6474 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 CVE-2026-3608 Upstream summary: A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-5662 Upstream summary: x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-27551 CVE-2025-27552 Upstream summary: DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm. This issue […]

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-46565 CVE-2025-43970 CVE-2025-43972 CVE-2025-43973 CVE-2025-7464 CVE-2026-30405 CVE-2026-37461 CVE-2026-41643  +7 more Upstream summary: Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-48924 Upstream summary: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(…) […]