🟢 Low ⏱ 5–15 min Last verified: 28 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libetpan — null dereference vulnerability in MIME parsing component Related CVEs: CVE-2017-8825 Upstream summary: rwhitworth reports: I was using American Fuzzy Lop (afl-fuzz) to fuzz input to the mime-parse test […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4853-1 Related CVEs: CVE-2018-4013 CVE-2019-6256 CVE-2019-7314 CVE-2019-9215 Upstream summary: It was discovered that liveMedia incorrectly handled certain network packets. An attacker could possibly use this issue to execute arbitrary code. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202101-28 Related CVEs: CVE-2019-17594 CVE-2019-17595 Upstream summary: Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 28 January 2020 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1903-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-17234 CVE-2018-17237 CVE-2020-10809 CVE-2018-17233 CVE-2018-17432 CVE-2018-17433 CVE-2018-17436 CVE-2020-10810 +12 more Upstream summary: Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through […]
🟠 High ⏱ 15–60 min Last verified: 28 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: powerdns-recursor — Denial of Service Related CVEs: CVE-2009-4009 CVE-2009-4010 CVE-2015-1868 CVE-2015-5470 CVE-2016-2120 CVE-2016-7068 CVE-2016-7072 CVE-2016-7073 +12 more Upstream summary: PowerDNS Team reports: 2025-07: Internal logic flaw in cache management can […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1294-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3634 Upstream summary: rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), […]
🟡 Medium ⏱ 5–30 min Last verified: 27 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postgresql — encoding based SQL injection Related CVEs: CVE-2005-0227 CVE-2005-0244 CVE-2005-0245 CVE-2005-0246 CVE-2005-0247 CVE-2006-2313 CVE-2006-2314 Upstream summary: The PostgreSQL development team reports: An attacker able to submit crafted strings to […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
