🟢 Low ⏱ 5–15 min Last verified: 3 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0658 Upstream summary: OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5725 Upstream summary: Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-5444 CVE-2020-24661 Upstream summary: Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-1569 CVE-2014-3468 CVE-2017-6891 CVE-2017-10790 CVE-2021-46848 CVE-2025-13151 CVE-2014-3467 CVE-2014-3469 +4 more Upstream summary: pkgsrc audit-packages flagged libtasn1<2.12 for vulnerability class 'local-system-compromise'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1569 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-62672 Upstream summary: rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact. This occurs in memcpy […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-39331 CVE-2024-30202 CVE-2024-30203 CVE-2024-30204 CVE-2025-1244 Upstream summary: pkgsrc audit-packages flagged emacs29<29.4 for vulnerability class 'remote-user-access'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-39331 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5144 Upstream summary: nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 3 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1255 CVE-2017-8806 CVE-2019-3466 Upstream summary: The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu […]
🟢 Low ⏱ 5–15 min Last verified: 3 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10759 Upstream summary: A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 3 December 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7785-1 Related CVEs: CVE-2025-41244 CVE-2025-22247 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2023-20867 CVE-2022-31676 Upstream summary: It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use […]
