🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2020-1503 Related CVEs: CVE-2019-9924 Upstream summary: rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2019 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:018 (see also SUSE bugzilla) Related CVEs: CVE-2010-0405 CVE-2019-12900 CVE-2016-3189 Upstream summary: Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Upstream summary: Oracle reports: 36 new security patches for Oracle MySQL. 11 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: inn — plaintext command injection into encrypted channel Related CVEs: CVE-2011-0411 CVE-2012-3523 Upstream summary: INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ircd-ratbox and charybdis — remote DoS vulnerability Upstream summary: atheme.org reports: All versions of Charybdis are vulnerable to a remotely-triggered crash bug caused by code originating from ircd-ratbox 2.0. (Incidentally, […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tin — buffer overflow vulnerabilities Upstream summary: Urs Janssen and Aleksey Salow report possible buffer overflows in tin versions 1.8.0 and 1.8.1. OpenPKG project elaborates there is an allocation off-by-one […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.99.5-r6 📖 ~4 min read • Source: Alpine secdb entry — lame 3.99.5-r6 Related CVEs: CVE-2015-9099 CVE-2015-9100 CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 CVE-2017-11720 Upstream summary: Alpine main repository for vedge ships lame 3.99.5-r6 which addresses CVE-2015-9099. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3995-1 Related CVEs: CVE-2018-19115 Upstream summary: It was discovered that Keepalived incorrectly handled certain HTTP status response codes. A remote attacker could use this issue to cause Keepalived to crash, […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5657-1 Related CVEs: CVE-2018-7999 CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774 CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 +1 more Upstream summary: It was discovered that Graphite2 mishandled specially crafted files. An attacker could possibly use this […]
🟡 Medium ⏱ 15–45 min Last verified: 26 January 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2019-14678, IBM PSIRT advisory page CVE: CVE-2019-14678 NVD summary: SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are […]
