🟠 High ⏱ 15–60 min Last verified: 10 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bugzilla — multiple vulnerabilities Related CVEs: CVE-2004-1061 CVE-2005-2173 CVE-2005-2174 CVE-2006-0913 CVE-2006-0914 CVE-2006-0915 CVE-2006-0916 CVE-2006-2420 +9 more Upstream summary: A Bugzilla Security Advisory reports: Cross-Site Scripting When viewing a single bug […]
🟠 High ⏱ 15–60 min Last verified: 10 May 2019 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:1744-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-8088 Upstream summary: org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0173-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-8242 Upstream summary: librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data […]
🟡 Medium ⏱ 15–45 min Last verified: 9 May 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2019-4102, IBM Support Bulletin CVE: CVE-2019-4102 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-0240 CVE-2013-1799 Upstream summary: Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sircd — remote reverse DNS buffer overflow Upstream summary: Secunia reports: A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.0.1-r1 📖 ~4 min read • Source: Alpine secdb entry — patchwork 2.0.1-r1 Related CVEs: CVE-2019-13122 Upstream summary: Alpine community repository for vedge ships patchwork 2.0.1-r1 which addresses CVE-2019-13122. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:2039-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-7164 Upstream summary: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]
