🟡 Medium ⏱ 10–30 min Last verified: 13 September 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0779-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1521 CVE-2017-5436 CVE-2018-7999 Upstream summary: The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.3.0-r1 📖 ~4 min read • Source: Alpine secdb entry — lxterminal 0.3.0-r1 Related CVEs: CVE-2016-10369 Upstream summary: Alpine community repository for vedge ships lxterminal 0.3.0-r1 which addresses CVE-2016-10369. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2019-1373 Related CVEs: CVE-2019-12290 CVE-2019-18224 Upstream summary: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long […]
🟠 High ⏱ 15–60 min Last verified: 12 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-3395 CVE-2015-3417 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 CVE-2015-6823 +3 more Upstream summary: NVD reports: The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: torrentflux — User-Agent XSS Vulnerability Related CVEs: CVE-2006-5227 Upstream summary: Steven Roddis reports that User-Agent string is not properly escaped when handled by torrentflux. This allows for arbitrary code insertion. […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mathopd — directory traversal vulnerability Upstream summary: Michiel Boland reports: The software has a vulnerability that could lead to directory traversal if the '*' construct for mass virtual hosting is […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Shibboleth Service Provider — SQL injection vulnerability in ODBC plugin Related CVEs: CVE-2015-2684 Upstream summary: Internet2 reports: The Shibboleth Service Provider includes a storage API usable for a number of […]
🟢 Low ⏱ 5–15 min Last verified: 12 September 2019 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-9512 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 12 September 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2854-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000518 Upstream summary: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured […]
