Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866 CVE-2020-13999 Upstream summary: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2). Table of contents Symptom & Impact […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-26132 CVE-2026-27837 Upstream summary: Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0085 CVE-2007-6110 Upstream summary: Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-21236 CVE-2023-27586 CVE-2026-31899 Upstream summary: CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-42740 CVE-2026-9277 Upstream summary: The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3534 CVE-2011-0530 CVE-2011-1925 CVE-2013-6410 CVE-2013-7441 CVE-2015-0847 CVE-2022-26495 CVE-2022-26496 Upstream summary: Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 CVE-2012-3421 CVE-2012-5530 CVE-2023-6917 CVE-2024-3019 CVE-2024-45769  +1 more Upstream summary: libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service […]

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-1999-0710 CVE-2002-0713 CVE-2002-0714 CVE-2002-0715 CVE-2002-0916 CVE-2004-0189 CVE-2004-0541 CVE-2004-0832  +12 more Upstream summary: The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6384 CVE-2014-4615 CVE-2019-3830 Upstream summary: (1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string […]

🟠 High   ⏱ 15–60 min  Last verified: 3 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2864 CVE-2012-5129 CVE-2013-1872 CVE-2013-1993 CVE-2019-5068 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922  +2 more Upstream summary: Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series […]