🟡 Medium ⏱ 10–30 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4055 CVE-2017-18214 CVE-2022-24785 CVE-2022-31129 Upstream summary: The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-48623 CVE-2025-40929 Upstream summary: The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13032 CVE-2019-13241 Upstream summary: An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed […]
🟡 Medium ⏱ 10–30 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6272 CVE-2015-6525 CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Upstream summary: Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2217 Upstream summary: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0065 CVE-2025-66004 Upstream summary: Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3216 Upstream summary: The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files […]
🟡 Medium ⏱ 10–30 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-7182 CVE-2019-6442 CVE-2019-6443 CVE-2019-6444 CVE-2019-6445 CVE-2021-22212 CVE-2023-4012 Upstream summary: The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds […]
🟡 Medium ⏱ 10–30 min Last verified: 5 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0129 CVE-2005-0130 CVE-2005-0131 CVE-2007-4400 CVE-2009-5050 CVE-2014-8483 CVE-2017-15923 Upstream summary: The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name […]
🟢 Low ⏱ 5–15 min Last verified: 5 July 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-28170 Upstream summary: In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid. […]
