Debian

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-24986 Upstream summary: KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0256 CVE-2009-3736 Upstream summary: GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-8159 CVE-2026-8161 CVE-2026-8162 Upstream summary: [email protected] and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parser. A crafted multipart […]

🟠 High   ⏱ 15–60 min  Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4551 CVE-2009-0790 CVE-2009-1957 CVE-2009-1958 CVE-2009-2185 CVE-2009-2661 CVE-2010-2628 CVE-2012-2388  +12 more Upstream summary: strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-21263 CVE-2021-43617 CVE-2021-43808 CVE-2024-52301 CVE-2025-27515 Upstream summary: Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same […]

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10672 CVE-2019-16091 CVE-2019-16092 CVE-2019-16093 CVE-2019-16094 CVE-2019-16095 CVE-2019-20016 CVE-2019-20063  +7 more Upstream summary: treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-22283 CVE-2020-22284 CVE-2020-8597 CVE-2026-8836 Upstream summary: A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-0838 Upstream summary: There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-5461 Upstream summary: Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-2053 CVE-2021-40926 Upstream summary: getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial […]