🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-6594 CVE-2017-17439 CVE-2019-12098 Upstream summary: The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201710-17 Related CVEs: CVE-2017-14737 Upstream summary: Type: information disclosure. Status: Fixed. Affected: 2.2.0-1. Fixed in: 2.3.0-1. Group: AVG-416. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4378-1 Related CVEs: CVE-2018-1000656 Upstream summary: It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201705-11 Related CVEs: CVE-2017-8849 Upstream summary: Type: privilege escalation. Status: Fixed. Affected: 2.0.0-1. Fixed in: 2.0.0-2. Group: AVG-268. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix — php frontend multiple vulnerabilities Upstream summary: Secunia reports: Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Arbitrary code execution via a format string vulnerability in jftpgw Related CVEs: CVE-2004-0448 Upstream summary: The log functions in jftpgw may allow remotely authenticated user to execute arbitrary code via […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nss — Use-after-free in TLS 1.2 generating handshake hashes Related CVEs: CVE-2016-2834 CVE-2017-5461 CVE-2017-5462 CVE-2017-7805 Upstream summary: Mozilla reports: During TLS 1.2 exchanges, handshake hashes are generated which point to […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: AccountsService — Insufficient path check in user_change_icon_file_authorized_cb() Related CVEs: CVE-2018-14036 Upstream summary: NVD reports: Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check […]
🟠 High ⏱ 30–90 min Last verified: 16 February 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2018-20733, IBM PSIRT advisory page CVE: CVE-2018-20733 NVD summary: BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. References: support.sas.com/kb/62/987.html support.sas.com/kb/62/987.html Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xfce — multiple vulnerabilities Related CVEs: CVE-2007-6531 CVE-2007-6532 Upstream summary: Gentoo reports: A remote attacker could entice a user to install a specially crafted "rc" file to execute arbitrary code […]
