🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-5011 CVE-2009-5012 CVE-2009-5013 CVE-2010-3494 Upstream summary: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon […]
🟠 High ⏱ 15–60 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0577 CVE-2004-0805 CVE-2004-0991 CVE-2006-1655 CVE-2017-12911 CVE-2017-12912 CVE-2017-14406 CVE-2017-14407 +11 more Upstream summary: mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-41881 Upstream summary: SDoP versions prior to 1.11 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of […]
🟠 High ⏱ 15–60 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-41880 CVE-2024-30266 CVE-2024-47763 CVE-2024-47813 CVE-2024-51745 CVE-2025-53901 CVE-2025-64345 CVE-2026-27204 +12 more Upstream summary: Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and […]
🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32952 Upstream summary: go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out […]
🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4456 Upstream summary: Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact. The functions `addr2cidr` and `cidrlookup` may return leading […]
🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35450 Upstream summary: Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-52595 CVE-2026-28348 CVE-2026-28350 Upstream summary: lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, the HTML Parser in lxml does not properly […]
🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2738 CVE-2013-2739 CVE-2013-2745 CVE-2020-12695 CVE-2020-28926 CVE-2022-26505 CVE-2023-33476 CVE-2023-47430 +1 more Upstream summary: minidlna has SQL Injection that may allow retrieval of arbitrary files Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0727 CVE-2013-7273 CVE-2015-7496 CVE-2016-1000002 CVE-2017-12164 CVE-2018-14424 CVE-2019-3825 CVE-2020-16125 +1 more Upstream summary: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary […]
