🟢 Low ⏱ 5–15 min Last verified: 29 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28282 Upstream summary: Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 29 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0107 CVE-2004-0108 CVE-2018-19416 CVE-2018-19517 CVE-2019-16167 CVE-2019-19725 CVE-2022-39377 CVE-2023-33204 Upstream summary: The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 29 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3111 Upstream summary: The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink […]
🟢 Low ⏱ 5–15 min Last verified: 29 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13936 Upstream summary: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account […]
🟡 Medium ⏱ 10–30 min Last verified: 28 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5929 CVE-2021-42550 CVE-2023-6378 CVE-2024-12798 CVE-2024-12801 CVE-2026-1225 Upstream summary: QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity […]
🟢 Low ⏱ 5–15 min Last verified: 28 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-61982 Upstream summary: An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A specially crafted OpenFOAM simulation file can lead to arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 28 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-38313 CVE-2023-38314 CVE-2023-38315 CVE-2023-38316 CVE-2023-38317 CVE-2023-38318 CVE-2023-38319 CVE-2023-38320 +7 more Upstream summary: An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer […]
🟡 Medium ⏱ 10–30 min Last verified: 28 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-12209 CVE-2019-12210 CVE-2021-31924 CVE-2025-23013 Upstream summary: Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify […]
🟡 Medium ⏱ 10–30 min Last verified: 28 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4514 CVE-2016-9888 CVE-2024-36474 CVE-2024-42415 Upstream summary: Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers […]
