🟡 Medium ⏱ 10–30 min Last verified: 8 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4267-1 Related CVEs: CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 Upstream summary: It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201807-11 Related CVEs: CVE-2018-14056 CVE-2018-14055 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1.7.0-2. Fixed in: 1.7.1-1. Group: AVG-737. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 8 January 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3782-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8373 CVE-2017-8372 CVE-2017-8374 Upstream summary: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:7679 (see also SUSE bugzilla) Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:0129-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libtorrent — remote DoS Upstream summary: X-cela reports: Calls into build_benocde that use %zu could crash on 64 bit machines due to the size change of size_t. Someone can force […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2007-0774 CVE-2007-1860 Upstream summary: Kazu Nambo reports: URL decoding the Apache webserver prior to decoding in the Tomcat server could pypass access control rules […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firebird — multiple remote buffer overflow vulnerabilities Upstream summary: RISE Security reports: There exists multiple vulnerabilities within functions of Firebird Relational Database, which when properly exploited can lead to remote […]
🟡 Medium ⏱ 10–30 min Last verified: 7 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: flyspray — multiple vulnerabilities Related CVEs: CVE-2007-1788 CVE-2007-6461 CVE-2008-1165 CVE-2008-1166 Upstream summary: The Flyspray Project reports: Flyspray is affected by a Cross Site scripting Vulnerability due to an error escaping […]
