🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17530 Upstream summary: common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7694 CVE-2020-7695 Upstream summary: This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-21366 CVE-2021-32796 CVE-2022-37616 CVE-2022-39353 CVE-2026-34601 CVE-2026-41672 CVE-2026-41673 CVE-2026-41674 +1 more Upstream summary: xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. […]
🟠 High ⏱ 15–60 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6419 CVE-2013-6433 CVE-2014-0056 CVE-2014-0071 CVE-2014-0187 CVE-2014-3555 CVE-2014-4167 CVE-2014-4615 +12 more Upstream summary: Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14464 CVE-2019-14496 CVE-2019-14497 CVE-2020-15569 CVE-2022-34927 Upstream summary: XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-4739 Upstream summary: Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK (Modules/ThirdParty/Expat/src/expat modules).This issue affects ITK: before 2.7.1. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10518 CVE-2016-10542 CVE-2021-32640 CVE-2024-37890 CVE-2026-45736 Upstream summary: A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29264 Upstream summary: An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0878 Upstream summary: Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access […]
🟢 Low ⏱ 5–15 min Last verified: 11 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-44312 Upstream summary: css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker […]
