🟡 Medium ⏱ 10–30 min Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgcrypt — ECDSA timing attack Related CVEs: CVE-2013-4242 CVE-2015-7511 CVE-2016-6313 CVE-2017-0379 CVE-2017-7526 CVE-2018-0495 CVE-2019-13627 Upstream summary: GnuPG reports: Mitigate an ECDSA timing attack. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.37-r0 📖 ~4 min read • Source: Alpine secdb entry — binutils-cross-embedded 2.37-r0 Related CVEs: CVE-2020-35448 Upstream summary: Alpine community repository for vedge ships binutils-cross-embedded 2.37-r0 which addresses CVE-2020-35448. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: egroupware — two vulnerabilities Related CVEs: CVE-2005-1202 CVE-2005-1203 Upstream summary: Egroupware Team report: Nahuel Grisolia from CYBSEC S.A. Security Systems found two security problems in EGroupware: Serious remote command execution […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: amaya — multiple buffer overflow vulnerabilities Related CVEs: CVE-2006-1900 CVE-2008-5282 CVE-2009-0323 Upstream summary: Secunia reports: A boundary error when processing "div" HTML tags can be exploited to cause a stack-based […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3 — Missing access check in Extbase Related CVEs: CVE-2007-1081 CVE-2009-0255 CVE-2009-0256 CVE-2009-0257 CVE-2009-0258 CVE-2009-0815 CVE-2009-0816 CVE-2009-3628 +12 more Upstream summary: TYPO3 reports: Extbase request handling fails to implement a […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-Elixir — weak use of cryptography Related CVEs: CVE-2012-2146 Upstream summary: Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnomevfs — unsafe URI handling Related CVEs: CVE-2004-0494 Upstream summary: Alexander Larsson reports that some versions of gnome-vfs and MidnightCommander contain a number of `extfs' scripts that do not properly […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202106-18 Related CVEs: CVE-2020-16121 Upstream summary: Type: information disclosure. Status: Fixed. Affected: 1.1.13-1. Fixed in: 1.2.3-1. Group: AVG-1260. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5239-1 Related CVEs: CVE-2020-13956 Upstream summary: It was discovered that HttpClient mishandled certain input. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code. Table […]
🟠 High ⏱ 15–60 min Last verified: 2 February 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2019-1145 Related CVEs: CVE-2018-5743 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
