🟢 Low ⏱ 5–15 min Last verified: 5 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-4540 Upstream summary: Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a […]
🟢 Low ⏱ 5–15 min Last verified: 5 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default case-insensitive collation in MySQL or MariaDB databases, third-party authentication […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3146 CVE-2013-1881 CVE-2015-7557 CVE-2015-7558 CVE-2016-4348 CVE-2016-6163 CVE-2017-11464 CVE-2019-20446 +1 more Upstream summary: librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0110 CVE-2004-0989 CVE-2007-6284 CVE-2008-3281 CVE-2008-3529 CVE-2008-4225 CVE-2008-4226 CVE-2009-2414 +12 more Upstream summary: Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9273 CVE-2021-3504 CVE-2021-3622 Upstream summary: lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1987 CVE-2016-7949 CVE-2016-7950 Upstream summary: Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-2474 Upstream summary: Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The function does not validate that […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-47256 Upstream summary: Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32614 CVE-2021-3548 Upstream summary: A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-16248 CVE-2023-26735 Upstream summary: Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also […]
