🟢 Low ⏱ 5–15 min Last verified: 1 February 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4077-1 Related CVEs: CVE-2019-3461 Upstream summary: It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to […]
🟡 Medium ⏱ 10–30 min Last verified: 1 February 2020 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:018 (see also SUSE bugzilla) Related CVEs: CVE-2010-0405 CVE-2019-12900 CVE-2016-3189 Upstream summary: Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2018-11724 Upstream summary: The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zenphoto — multiple vulnerabilities Related CVEs: CVE-2007-6666 CVE-2015-5591 CVE-2015-5592 CVE-2015-5593 CVE-2015-5594 CVE-2015-5595 Upstream summary: zenphoto reports: Fixes several SQL Injection, XSS and path traversal security issues Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2020 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:3135-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2708 Upstream summary: Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1580 Related CVEs: CVE-2020-0452 CVE-2019-9278 CVE-2020-0093 CVE-2020-0182 CVE-2020-12767 CVE-2020-13113 CVE-2020-13114 CVE-2020-13112 Upstream summary: A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2019-2593 Related CVEs: CVE-2019-12527 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201803-12 Related CVEs: CVE-2018-5146 CVE-2017-14633 CVE-2017-14632 CVE-2017-11333 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1.3.5-1. Fixed in: 1.3.6-1. Group: AVG-367. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2009:014 (see also SUSE bugzilla) Related CVEs: CVE-2009-1720 CVE-2009-1721 Upstream summary: Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly […]
