Debian

🟠 High   ⏱ 15–60 min  Last verified: 10 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-0876 CVE-2012-1148 CVE-2012-6702 CVE-2013-0340 CVE-2015-1283 CVE-2016-0718  +12 more Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-7203 CVE-2018-16976 CVE-2018-20683 Upstream summary: gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18021 Upstream summary: It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI. […]

🟠 High   ⏱ 15–60 min  Last verified: 9 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10210 CVE-2016-10211 CVE-2017-11328 CVE-2017-5923 CVE-2017-5924 CVE-2017-8294 CVE-2017-8929 CVE-2017-9304  +11 more Upstream summary: libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service (NULL pointer dereference […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-1193 CVE-2015-1194 Upstream summary: Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-4817 CVE-2011-1500 Upstream summary: pithos before 0.3.5 allows overwrite of arbitrary files via symlinks. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-1400 Upstream summary: The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-61982 Upstream summary: An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to […]