🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALEA-2021:1850 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: websocket-extensions — ReDoS vulnerability Related CVEs: CVE-2020-7663 Upstream summary: Changelog: Remove a ReDoS vulnerability in the header parser (CVE-2020-7663) Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ktorrent — multiple vulnerabilities Related CVEs: CVE-2007-1384 CVE-2007-1385 Upstream summary: Two problems have been found in KTorrent: KTorrent does not properly sanitize file names to filter out ".." components, so […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2019:2720 Related CVEs: CVE-2019-12384 CVE-2018-11784 CVE-2018-8014 CVE-2018-8034 CVE-2018-8037 CVE-2019-14540 CVE-2019-16335 CVE-2019-16942 +9 more Upstream summary: The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dia — remote command execution vulnerability Related CVEs: CVE-2006-1550 CVE-2008-5984 Upstream summary: Security Focus reports: An attacker could exploit this issue by enticing an unsuspecting victim to execute the vulnerable […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.9.0-r0 📖 ~4 min read • Source: Alpine secdb entry — icingaweb2 2.9.0-r0 Related CVEs: CVE-2021-32746 CVE-2021-32747 Upstream summary: Alpine community repository for vedge ships icingaweb2 2.9.0-r0 which addresses CVE-2021-32746. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: newsfetch — server response buffer overflow vulnerability Related CVEs: CVE-2005-0132 Upstream summary: The newsfetch program uses the sscanf function to read information from server responses into static memory buffers. Unfortunately […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19308 Upstream summary: In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due […]
