🟢 Low ⏱ 5–15 min Last verified: 9 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-6862 Upstream summary: A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field […]
🟡 Medium ⏱ 10–30 min Last verified: 9 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3484 CVE-2015-1817 CVE-2016-8859 CVE-2017-15650 CVE-2019-14697 CVE-2020-28928 CVE-2025-26519 CVE-2026-40200 +1 more Upstream summary: Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 […]
🟡 Medium ⏱ 10–30 min Last verified: 9 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-29394 CVE-2020-36244 CVE-2021-29507 CVE-2022-31291 CVE-2022-39836 CVE-2022-39837 CVE-2023-26257 CVE-2023-36321 Upstream summary: A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4462 Upstream summary: lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7351 CVE-2023-49469 CVE-2025-55291 CVE-2026-24476 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-33671 CVE-2026-33672 Upstream summary: Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1002209 Upstream summary: QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2145 CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 Upstream summary: The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute […]
🟢 Low ⏱ 5–15 min Last verified: 8 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1820 CVE-2015-3448 Upstream summary: REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0248 CVE-2013-2186 CVE-2014-0050 CVE-2016-1000031 CVE-2016-3092 CVE-2023-24998 CVE-2025-48976 Upstream summary: The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, […]
