Debian

🟡 Medium   ⏱ 10–30 min  Last verified: 15 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-42476 CVE-2026-42477 CVE-2026-42478 CVE-2026-42479 CVE-2026-42480 CVE-2026-42481 Upstream summary: Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii […]

🟠 High   ⏱ 15–60 min  Last verified: 15 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16770 CVE-2020-11076 CVE-2020-11077 CVE-2020-5247 CVE-2020-5249 CVE-2021-29509 CVE-2021-41136 CVE-2022-23634  +4 more Upstream summary: In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize […]

🟠 High   ⏱ 15–60 min  Last verified: 15 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2141 CVE-2016-3995 CVE-2016-7420 CVE-2016-9939 CVE-2017-9434 CVE-2019-14318 CVE-2021-40530 CVE-2022-48570  +4 more Upstream summary: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1976 CVE-2025-46836 Upstream summary: ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4492 CVE-2014-10077 Upstream summary: Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-3153 CVE-2011-3349 CVE-2011-4105 CVE-2012-1111 CVE-2013-4331 CVE-2015-8316 Upstream summary: dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-33186 Upstream summary: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1285 CVE-2026-40021 Upstream summary: Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-58367 CVE-2026-33155 Upstream summary: DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-25063 Upstream summary: gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary […]