Debian

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-19919 CVE-2019-20920 CVE-2021-23369 CVE-2021-23383 CVE-2026-33916 CVE-2026-33937 CVE-2026-33938 CVE-2026-33939  +2 more Upstream summary: Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0620 CVE-2003-0645 CVE-2006-4250 CVE-2015-1336 Upstream summary: Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2099 CVE-2017-14176 Upstream summary: Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-36191 CVE-2021-41247 CVE-2024-28233 CVE-2024-41942 CVE-2026-33709 CVE-2026-40864 Upstream summary: JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-1959 CVE-2008-2085 Upstream summary: Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-4193 Upstream summary: Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file. Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-6298 CVE-2023-6681 CVE-2024-28102 CVE-2026-39373 Upstream summary: The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-0144 Upstream summary: shelljs is vulnerable to Improper Privilege Management Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3720 Upstream summary: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a […]

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-4676 CVE-2007-6353 CVE-2008-2696 CVE-2014-9449 CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862  +12 more Upstream summary: Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the […]