🟢 Low ⏱ 5–15 min Last verified: 24 January 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2551-1 Related CVEs: CVE-2015-0254 Upstream summary: David Jorm discovered that the Apache Standard Taglibs incorrectly handled external XML entities. A remote attacker could possibly use this issue to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 23 January 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0682-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-2913 Upstream summary: Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands via […]
🟡 Medium ⏱ 10–30 min Last verified: 22 January 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3228-1 Related CVEs: CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 CVE-2014-6272 Upstream summary: Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with […]
🟠 High ⏱ 30–90 min Last verified: 21 January 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2011-1385, IBM Support Bulletin CVE: CVE-2011-1385 NVD summary: IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) […]
🟠 High ⏱ 30–90 min Last verified: 20 January 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-1208, IBM PSIRT advisory page CVE: CVE-1999-1208 NVD summary: Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument. References: […]
🟠 High ⏱ 30–90 min Last verified: 20 January 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2003-0119, IBM Support Bulletin CVE: CVE-2003-0119 NVD summary: The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly […]
🟡 Medium ⏱ 15–45 min Last verified: 18 January 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2005-2232, IBM PSIRT advisory page CVE: CVE-2005-2232 NVD summary: Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-5044 CVE-2009-5080 CVE-2009-5081 Upstream summary: contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on […]
🟢 Low ⏱ 10–30 min Last verified: 17 January 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2001-1079, IBM PSIRT advisory page CVE: CVE-2001-1079 NVD summary: create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to […]
🟠 High ⏱ 30–90 min Last verified: 16 January 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2000-1216, IBM Support Bulletin CVE: CVE-2000-1216 NVD summary: Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. References: www-1.ibm.com/support/docview.wss?uid=isg1IY0783 […]
