🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-1934 Upstream summary: tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15105-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-2217 Upstream summary: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]
🟢 Low ⏱ 5–15 min Last verified: 10 November 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7052-1 Related CVEs: CVE-2017-8288 CVE-2019-3820 Upstream summary: It was discovered that GNOME Shell mishandled extensions that fail to reload, possibly leading to extensions staying enabled on the lock screen. An […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.1.15-r0 📖 ~4 min read • Source: Alpine secdb entry — libxcursor 1.1.15-r0 Related CVEs: CVE-2017-16612 Upstream summary: Alpine main repository for vedge ships libxcursor 1.1.15-r0 which addresses CVE-2017-16612. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.7.0-r1 📖 ~4 min read • Source: Alpine secdb entry — hunspell 1.7.0-r1 Related CVEs: CVE-2019-16707 Upstream summary: Alpine main repository for vedge ships hunspell 1.7.0-r1 which addresses CVE-2019-16707. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 10 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — SQL injection in pg_upgrade and pg_dump Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 +12 more Upstream summary: The PostgreSQL project reports: CVE-2018-16850: SQL injection in […]
🟠 High ⏱ 15–60 min Last verified: 10 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mediawiki — multiple vulnerabilities Related CVEs: CAN-2005-4501 CVE-2006-1498 CVE-2007-4828 CVE-2008-5249 CVE-2008-5250 CVE-2008-5252 CVE-2010-1150 CVE-2011-0047 +12 more Upstream summary: Mediawiki reports: (T355538, CVE-2024-PENDING) SECURITY: XSS in edit summary parser. (T357760, CVE-2024-PENDING) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2756-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-14868 Upstream summary: In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw […]
🟡 Medium ⏱ 5–30 min Last verified: 9 November 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
