🔴 Critical ⏱ 15–90 min Last verified: 22 February 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2019-3196 Related CVEs: CVE-2019-11759 CVE-2019-11764 CVE-2019-11758 CVE-2019-11761 CVE-2019-11762 CVE-2019-11760 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.2304.0-r0 📖 ~4 min read • Source: Alpine secdb entry — libfastjson 1.2304.0-r0 Related CVEs: CVE-2020-12762 Upstream summary: Alpine main repository for vedge ships libfastjson 1.2304.0-r0 which addresses CVE-2020-12762. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-12678 CVE-2012-2396 CVE-2018-11439 Upstream summary: In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]
🟠 High ⏱ 15–60 min Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxine — multiple vulnerabilities Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2004-1300 CVE-2004-1379 CVE-2005-1195 CVE-2005-2967 CVE-2006-1664 +12 more Upstream summary: xine developers report: Fix another possible int overflow in the 4XM demuxer. […]
🟡 Medium ⏱ 10–30 min Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kde-runtime — kdesu: displayed command truncated by unicode string terminator Related CVEs: CVE-2013-7252 CVE-2014-8600 CVE-2016-7787 Upstream summary: Albert Aastals Cid reports: A maliciously crafted command line for kdesu can result […]
🟡 Medium ⏱ 10–30 min Last verified: 21 February 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-4763 Related CVEs: CVE-2020-10958 CVE-2020-10967 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 CVE-2013-2145 Upstream summary: The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3494 Upstream summary: kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain […]
🟠 High ⏱ 30–90 min Last verified: 21 February 2020 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2020-4411, IBM Support Bulletin CVE: CVE-2020-4411 NVD summary: The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel […]
