🟡 Medium ⏱ 15–45 min Last verified: 5 March 2019 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2019-14678, IBM PSIRT advisory page CVE: CVE-2019-14678 NVD summary: SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: e2fsprogs — potential buffer overrun bugs in the blkid library and in the fsck program Upstream summary: Theodore Y. Ts'o reports: Fixed some potential buffer overrun bugs in the blkid […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.5.1-r0 📖 ~4 min read • Source: Alpine secdb entry — exempi 2.5.1-r0 Related CVEs: CVE-2018-12648 Upstream summary: Alpine community repository for vedge ships exempi 2.5.1-r0 which addresses CVE-2018-12648. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2016-6662 CVE-2016-9843 CVE-2017-10155 CVE-2017-10165 CVE-2017-10167 CVE-2017-10203 CVE-2017-10227 CVE-2017-10268 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-4440 CVE-2013-4442 Upstream summary: Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PEAR — Net_Ping and Net_Traceroute remote arbitrary command injection Related CVEs: CVE-2009-4024 CVE-2009-4025 Upstream summary: PEAR Security Advisory reports: Multiple remote arbitrary command injections have been found in the Net_Ping […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201904-1 Related CVEs: CVE-2018-15587 Upstream summary: Type: content spoofing. Status: Fixed. Affected: 3.30.5-1. Fixed in: 3.32.0-1. Group: AVG-889. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — tag forgery vulnerability Related CVEs: CVE-2016-9243 CVE-2018-10903 Upstream summary: The Python Cryptographic Authority (PyCA) project reports: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vtiger — multiple remote file inclusion vulnerabilities Related CVEs: CVE-2006-5289 Upstream summary: Dedi Dwianto a.k.a the_day reports: Input passed to the "$calpath" parameter in update.php is not properly verified before […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: up-imapproxy — multiple vulnerabilities Related CVEs: CVE-2004-1035 Upstream summary: Timo Sirainen reports: There are various bugs in up-imapproxy which can crash it. Since up-imapproxy runs in a single process with […]
