🟡 Medium ⏱ 10–30 min Last verified: 8 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — various problems in dereferrer Related CVEs: CVE-2005-0961 CVE-2005-3759 CVE-2006-1491 CVE-2006-2195 CVE-2006-3548 Upstream summary: Horde 3.1.2 release announcement: Security Fixes: Closed XSS problems in dereferrer (IE only), help viewer […]
🟠 High ⏱ 5–30 min Last verified: 8 March 2020 Affected versions: RHEL 7 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-ruby_parser — insecure tmp file usage Related CVEs: CVE-2013-0162 Upstream summary: Michael Scherer reports: This is a relatively minor tmp file usage issue. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-libwww — possibility to remote servers to create file with a .(dot) character Related CVEs: CVE-2010-2253 Upstream summary: lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4667-1 Related CVEs: CVE-2020-27350 CVE-2020-3810 CVE-2019-3462 CVE-2018-0501 Upstream summary: Kevin Backhouse discovered that APT incorrectly handled certain packages. A local attacker could possibly use this issue to cause APT to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.2.2-r0 📖 ~4 min read • Source: Alpine secdb entry — irssi 1.2.2-r0 Related CVEs: CVE-2019-15717 CVE-2019-13045 CVE-2019-5882 CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053 CVE-2018-7054 +12 more Upstream summary: Alpine community repository for vedge ships irssi 1.2.2-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2020 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15422 CVE-2020-10531 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 8 March 2020 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0739 CVE-2019-1547 CVE-2019-1551 CVE-2019-1559 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3635 Upstream summary: Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows […]
🟢 Low ⏱ 5–15 min Last verified: 7 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: proxychains-ng — current path as the first directory for the library search path Related CVEs: CVE-2015-3887 Upstream summary: Mamoru TASAKA reports: proxychains4 sets LD_PRELOAD to dlopen libproxychains4.so and execvp() the […]
