🟢 Low ⏱ 5–15 min Last verified: 17 September 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4535-1 Related CVEs: CVE-2019-7653 Upstream summary: Gabriel Corona discovered that RDFLib did not properly load modules on the command-line. An attacker could possibly use this issue to cause RDFLib to […]
🟠 High ⏱ 15–60 min Last verified: 17 September 2019 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3895-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20378 Upstream summary: ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 5–30 min Last verified: 16 September 2019 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 5–30 min Last verified: 16 September 2019 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.3.6-r0 📖 ~4 min read • Source: Alpine secdb entry — neovim 0.3.6-r0 Related CVEs: CVE-2019-12735 CVE-2017-5953 CVE-2017-6349 CVE-2017-6350 CVE-2016-1248 Upstream summary: Alpine community repository for vedge ships neovim 0.3.6-r0 which addresses CVE-2019-12735. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 16 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenLDAP — incorrect handling of NULL in certificate Common Name Related CVEs: CVE-2009-3767 Upstream summary: Jan Lieskovsky reports: OpenLDAP does not properly handle a '\0' character in a domain name […]
🟢 Low ⏱ 5–15 min Last verified: 16 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pango — integer overflow Related CVEs: CVE-2009-1194 Upstream summary: oCERT reports: Pango suffers from a multiplicative integer overflow which may lead to a potentially exploitable, heap overflow depending on the […]
🟡 Medium ⏱ 10–30 min Last verified: 16 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 16 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]
🟡 Medium ⏱ 10–30 min Last verified: 16 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: glibc — getaddrinfo stack-based buffer overflow Related CVEs: CVE-2014-6271 CVE-2014-7169 CVE-2015-0235 CVE-2015-7547 Upstream summary: Fabio Olive Leite reports: A stack-based buffer overflow was found in libresolv when invoked from nss_dns, […]
