🟢 Low ⏱ 5–15 min Last verified: 31 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: neon format string vulnerabilities Related CVEs: CVE-2004-0179 Upstream summary: Greuff reports that the neon WebDAV client library contains several format string bugs within error reporting code. A malicious server may […]
🟢 Low ⏱ 5–15 min Last verified: 31 March 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-10183 Upstream summary: Virt-install(1) utility used to provision new virtual machines has introduced an option '–unattended' to create VMs without user interaction. This option accepts […]
🟡 Medium ⏱ 10–30 min Last verified: 31 March 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:1497-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-18266 Upstream summary: The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment […]
🔴 Critical ⏱ 15–90 min Last verified: 31 March 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:177-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18218 CVE-2012-1571 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2017-1000249 CVE-2019-8905 CVE-2019-8906 +2 more Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:3035-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16976 CVE-2018-20683 Upstream summary: Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:0143-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6690 Upstream summary: python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unzip — multiple vulnerabilities Related CVEs: CVE-2005-2475 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636 CVE-2015-1315 CVE-2015-7696 CVE-2015-7697 Upstream summary: Gustavo Grieco reports: Two issues were found in unzip 6.0: * A heap overflow […]
🟢 Low ⏱ 5–15 min Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4100-1 Related CVEs: CVE-2016-6232 CVE-2019-14744 Upstream summary: It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. […]
🟡 Medium ⏱ 10–30 min Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3974-1 Related CVEs: CVE-2018-11099 CVE-2018-11129 CVE-2018-11130 Upstream summary: It was discovered that VCFtools improperly handled certain input. If a user was tricked into opening a crafted input file, VCFtools could […]
