🟢 Low ⏱ 5–15 min Last verified: 11 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-redcarpet — XSS vulnerability Upstream summary: Daniel LeCheminant reports: When markdown is being presented as HTML, there seems to be a strange interaction between _ and @ that lets an […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3911-2 Related CVEs: https://launchpad.net/bugs/1835596 CVE-2019-18218 CVE-2019-8904 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 CVE-2014-9620 CVE-2014-9621 +3 more Upstream summary: USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that […]
🟡 Medium ⏱ 10–30 min Last verified: 11 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5380-1 Related CVEs: CVE-2019-18276 CVE-2019-9924 CVE-2016-0634 CVE-2016-7543 CVE-2016-9401 CVE-2017-5932 Upstream summary: It was discovered that Bash did not properly drop privileges when the binary had the setuid bit enabled. An […]
🟠 High ⏱ 15–60 min Last verified: 11 April 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1658-1 (see also SUSE bugzilla) Related CVEs: CVE-2004-2771 CVE-2014-7844 Upstream summary: The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 11 April 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14767 CVE-2018-16657 CVE-2018-8828 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:023 (see also SUSE bugzilla) Related CVEs: CVE-2010-4005 Upstream summary: The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Imager — possibly exploitable buffer overflow Related CVEs: CVE-2007-1942 CVE-2007-1943 CVE-2007-1946 CVE-2007-1948 Upstream summary: Imager 0.56 and all earlier versions with BMP support have a security issue when reading compressed […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-2489 CVE-2011-2490 Upstream summary: Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4778-1 Related CVEs: CVE-2015-8869 CVE-2018-9838 Upstream summary: It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to steal sensitive information, cause a denial of […]
