Debian

🟢 Low   ⏱ 5–15 min  Last verified: 31 August 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-11082 Upstream summary: In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0740 Upstream summary: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. […]

🟠 High   ⏱ 15–60 min  Last verified: 30 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-32468 CVE-2025-35984 CVE-2025-46407 CVE-2025-50129 CVE-2025-52456 CVE-2025-52930 CVE-2025-53085 CVE-2025-53510  +4 more Upstream summary: A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-14313 Upstream summary: The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg(). Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-19871 CVE-2020-23884 CVE-2025-5683 Upstream summary: An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. Table of contents Symptom & Impact Environment & Reproduction […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-10243 CVE-2019-17420 CVE-2024-23837 CVE-2024-28871 CVE-2024-45797 CVE-2025-53537 Upstream summary: htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header. […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-3085 Upstream summary: The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspecified vectors, related to "stack manipulation" issues. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-64718 Upstream summary: js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-61982 Upstream summary: An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to […]