Debian

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-12290 CVE-2019-18224 Upstream summary: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-4156 Upstream summary: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-5155 CVE-2018-17942 Upstream summary: In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-25032 CVE-2024-1681 CVE-2024-6221 CVE-2024-6839 CVE-2024-6844 CVE-2024-6866 Upstream summary: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-3560 Upstream summary: A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0317 CVE-2007-2318 CVE-2013-4206 CVE-2013-4207 CVE-2013-4208 CVE-2013-4852 CVE-2019-5429 CVE-2023-48795  +1 more Upstream summary: Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0851 Upstream summary: The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files. […]

🟠 High   ⏱ 15–60 min  Last verified: 10 November 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-2524 CVE-2017-2885 CVE-2018-12910 CVE-2019-17266 CVE-2024-52530 CVE-2024-52531 CVE-2024-52532 CVE-2025-14523  +12 more Upstream summary: Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0723 Upstream summary: Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0188 Upstream summary: lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious […]