🟢 Low ⏱ 5–15 min Last verified: 11 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-49589 CVE-2025-67749 Upstream summary: PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. A stack-based buffer overflow exists in the Kprintf_HLE function of PCSX2 versions up to […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-29364 CVE-2025-29365 Upstream summary: spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls. The application verifies the legitimacy of the […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to […]
🟠 High ⏱ 15–60 min Last verified: 10 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2015-8396 CVE-2015-8397 CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVE-2025-11266 +5 more Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module […]
🟠 High ⏱ 15–60 min Last verified: 9 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-47015 CVE-2023-22084 CVE-2023-52969 CVE-2023-52970 CVE-2023-52971 CVE-2024-21096 CVE-2025-13699 CVE-2025-21490 +3 more Upstream summary: MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for […]
🟡 Medium ⏱ 10–30 min Last verified: 7 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-10031 CVE-2014-125112 CVE-2025-40923 Upstream summary: Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 7 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69277 Upstream summary: libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is […]
🟡 Medium ⏱ 10–30 min Last verified: 6 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14158 CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 CVE-2025-6176 Upstream summary: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily […]
🟠 High ⏱ 15–60 min Last verified: 5 August 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2027 CVE-2016-4000 CVE-2017-17522 CVE-2019-16935 CVE-2025-12084 CVE-2025-15366 CVE-2025-15367 CVE-2025-6069 +3 more Upstream summary: Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which […]
🟡 Medium ⏱ 10–30 min Last verified: 3 August 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17689 CVE-2017-9604 CVE-2018-19516 CVE-2019-10732 CVE-2021-31855 CVE-2025-69412 Upstream summary: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. […]
