Debian

🟢 Low   ⏱ 5–15 min  Last verified: 30 September 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2305 Upstream summary: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 CVE-2023-4016 Upstream summary: procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3126 CVE-2014-8123 Upstream summary: The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3099 CVE-2007-3100 CVE-2009-1297 CVE-2017-17840 CVE-2020-13987 CVE-2020-13988 CVE-2020-17437 Upstream summary: usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 September 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7677 Upstream summary: This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 September 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6640 CVE-2014-4945 CVE-2014-4946 CVE-2025-30349 Upstream summary: Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 September 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-25107 Upstream summary: The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits. Table of […]

🟠 High   ⏱ 15–60 min  Last verified: 29 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-38562 CVE-2022-25802 CVE-2022-25803 CVE-2023-41259 CVE-2023-41260 CVE-2023-45024 CVE-2024-3262 CVE-2025-2545  +12 more Upstream summary: Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-1604 CVE-2014-1938 Upstream summary: The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json […]