🟠 High ⏱ 15–60 min Last verified: 30 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — password hash disclosure Related CVEs: CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219 +12 more Upstream summary: Django release notes: CVE-2018-16984: Password hash disclosure to "view only" admin […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201701-1 Related CVEs: CVE-2016-9011 CVE-2015-4696 CVE-2015-4695 CVE-2015-4588 CVE-2015-0848 CVE-2009-3546 CVE-2009-1364 CVE-2007-3477 +5 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 0.2.8.4-13. Fixed in: 0.2.8.4-14. Group: AVG-16. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 30 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MariaDB — Nullpointer dereference Related CVEs: CVE-2016-9843 CVE-2018-0739 CVE-2018-25032 CVE-2018-2767 CVE-2018-3054 CVE-2018-3056 CVE-2018-3058 CVE-2018-3060 +12 more Upstream summary: The MariaDB project reports: MariaDB Server is vulnerable to Denial of Service. […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp-client — dhclient does not strip or escape shell meta-characters Related CVEs: CVE-2009-0692 CVE-2011-0997 Upstream summary: ISC reports: ISC dhclient did not strip or escape certain shell meta-characters in responses […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-1853 Upstream summary: Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.8-r0 📖 ~4 min read • Source: Alpine secdb entry — cabextract 1.8-r0 Related CVEs: CVE-2018-18584 Upstream summary: Alpine community repository for vedge ships cabextract 1.8-r0 which addresses CVE-2018-18584. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: telepathy-gabble — TLS verification bypass Related CVEs: CVE-2013-1431 Upstream summary: Simon McVittie reports: This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a "legacy Jabber" (pre-XMPP) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2019-1227 Related CVEs: CVE-2019-5953 CVE-2018-0494 Upstream summary: Buffer overflow in GNU Wget allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors. (CVE-2019-5953) […]
🟢 Low ⏱ 5–15 min Last verified: 29 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Dancer — possible to abuse session cookie values Upstream summary: Russell Jenkins reports: It was possible to abuse session cookie values so that file-based session stores such as Dancer::Session::YAML or […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201706-10 Related CVEs: CVE-2017-6891 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 4.10-1. Fixed in: 4.11-1. Group: AVG-286. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
