🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-2102 Upstream summary: InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.9-r0 📖 ~4 min read • Source: Alpine secdb entry — recutils 1.9-r0 Related CVEs: CVE-2021-46019 CVE-2021-46022 Upstream summary: Alpine community repository for vv3.20 ships recutils 1.9-r0 which addresses CVE-2021-46019. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-13797 Upstream summary: The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10195 Upstream summary: lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to […]
🟠 High ⏱ 15–60 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6199 CVE-2019-11065 CVE-2019-15052 CVE-2019-16370 CVE-2021-29428 CVE-2021-29429 CVE-2021-32751 CVE-2023-35946 +5 more Upstream summary: ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object. […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-25399 CVE-2023-29824 Upstream summary: A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 4.0.0-r0 📖 ~4 min read • Source: Alpine secdb entry — nrpe 4.0.0-r0 Related CVEs: CVE-2020-6581 CVE-2020-6582 Upstream summary: Alpine main repository for vv3.20 ships nrpe 4.0.0-r0 which addresses CVE-2020-6581. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6370 CVE-2013-6371 CVE-2020-12762 CVE-2021-32292 Upstream summary: Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8836 CVE-2015-8837 Upstream summary: Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-37185 CVE-2023-37186 CVE-2023-37187 CVE-2023-37188 CVE-2024-3203 CVE-2024-3204 CVE-2025-29476 Upstream summary: pkgsrc audit-packages flagged blosc2<2.9.3 for vulnerability class 'null-pointer-dereference'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-37185 Table of contents Symptom & Impact Environment & Reproduction Root […]
