🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-2141 Upstream summary: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tptest — pwd Remote Stack Buffer Overflow Upstream summary: SecurityFocus reports: TPTEST is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code […]
🟠 High ⏱ 5–30 min Last verified: 22 June 2019 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: exim — SQL injection Related CVEs: CVE-2004-0400 CVE-2005-0021 CVE-2005-0022 CVE-2010-4345 CVE-2011-0017 CVE-2011-1407 CVE-2011-1764 CVE-2012-5671 +6 more Upstream summary: [email protected] reports: Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: owncloud — multiple vulnerabilities Related CVEs: CVE-2013-2039 CVE-2013-2040 CVE-2013-2041 CVE-2013-2042 CVE-2013-2043 CVE-2013-2044 CVE-2013-2045 CVE-2013-2047 +9 more Upstream summary: Owncloud reports: Reflected XSS in OCS provider discovery (oC-SA-2016-001) Information Exposure Through […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3796-1 Related CVEs: CVE-2018-1000805 CVE-2018-7750 Upstream summary: Daniel Hoffman discovered that Paramiko incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202208-16 Related CVEs: CVE-2018-19886 Upstream summary: An invalid pointer can be dereferenced in the huffcode function of libfaac/huff2.c, leading to a crash. Table of contents Symptom & Impact Environment & Reproduction Root […]
🔴 Critical ⏱ 15–90 min Last verified: 22 June 2019 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:177-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18218 CVE-2012-1571 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 +4 more Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of […]
🟠 High ⏱ 15–60 min Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xen-tools — xenstore denial of service via repeated update Related CVEs: CVE-2014-3672 CVE-2015-2152 CVE-2015-2752 CVE-2015-2756 CVE-2015-3209 CVE-2015-3259 CVE-2015-3456 CVE-2015-4103 +12 more Upstream summary: The Xen Project reports: Unprivileged guests may […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]
