🟡 Medium ⏱ 5–30 min Last verified: 23 March 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 23 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]
🟡 Medium ⏱ 10–30 min Last verified: 23 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: databases/postgresql*-client — multiple vulnerabilities Related CVEs: CVE-2009-4034 CVE-2009-4136 CVE-2012-0866 CVE-2012-0867 CVE-2012-0868 Upstream summary: The PostgreSQL Global Development Group reports: These vulnerabilities could allow users to define triggers that execute functions […]
🟢 Low ⏱ 5–15 min Last verified: 23 March 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4498-1 Related CVEs: CVE-2019-15587 Upstream summary: It was discovered that Loofah does not properly sanitize JavaScript in sanitized output. An attacker could possibly use this issue to perform XSS attacks. […]
🟠 High ⏱ 15–60 min Last verified: 23 March 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2019-1623 Related CVEs: CVE-2019-11703 CVE-2019-11705 CVE-2019-11708 CVE-2019-11704 CVE-2019-11706 CVE-2019-11707 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 23 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2012-5829 CVE-2013-0743 CVE-2013-0744 CVE-2013-0745 CVE-2013-0746 CVE-2013-0747 CVE-2013-0748 CVE-2013-0749 +12 more Upstream summary: The Mozilla Project reports: MFSA 2013-01 Miscellaneous memory safety hazards (rv:18.0/ rv:10.0.12 […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202402-31 Related CVEs: CVE-2019-25051 Upstream summary: Multiple vulnerabilities have been discovered in GNU Aspell. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 5–30 min Last verified: 22 March 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smart_proxy_dynflow — authentication bypass vulnerability Related CVEs: CVE-2018-14643 Upstream summary: MITRE reports: An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:2790-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15120 Upstream summary: libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service […]
