🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2022:0447-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1437 Upstream summary: Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hdf5 — multiple vulnerabilities Related CVEs: CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 Upstream summary: Talos Security reports: CVE-2016-4330 (TALOS-2016-0176) – HDF5 Group libhdf5 H5T_ARRAY Code Execution Vulnerability CVE-2016-4331 (TALOS-2016-0177) – HDF5 Group […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: claws-mail — no bounds checking on the output buffer in conv_jistoeuc, conv_euctojis, conv_sjistoeuc Related CVEs: CVE-2007-1558 CVE-2007-2958 CVE-2007-6208 CVE-2015-8614 Upstream summary: DrWhax reports: So in codeconv.c there is a function […]
🟡 Medium ⏱ 15–45 min Last verified: 2 April 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2019-4386, IBM Support Bulletin CVE: CVE-2019-4386 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3539 Upstream summary: base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to […]
🟢 Low ⏱ 5–15 min Last verified: 2 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-suds — vulnerable to symlink attacks Related CVEs: CVE-2013-2217 Upstream summary: SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-9928 CVE-2017-5603 Upstream summary: MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an […]
🟢 Low ⏱ 5–15 min Last verified: 1 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2020-1453 Related CVEs: CVE-2018-10916 Upstream summary: It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of […]
🟡 Medium ⏱ 10–30 min Last verified: 1 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ipsec-tools — remotely exploitable computational-complexity attack Related CVEs: CVE-2008-3651 CVE-2008-3652 CVE-2016-10396 Upstream summary: Robert Foggia via NetBSD GNATS reports: The ipsec-tools racoon daemon contains a remotely exploitable computational complexity attack […]
