🟢 Low ⏱ 5–15 min Last verified: 29 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: base — PHP SQL injection vulnerability Upstream summary: A Secunia Advisory reports: Remco Verhoef has discovered a vulnerability in Basic Analysis and Security Engine (BASE), which can be exploited by […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0031 CVE-2003-0032 Upstream summary: Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash). Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1999023 Upstream summary: The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4172 Related CVEs: CVE-2021-3481 Upstream summary: Qt is a software toolkit for developing applications. The following packages have been upgraded to a later upstream version: adwaita-qt (1.2.1), python-qt5 (5.15.0), qgnomeplatform (0.7.1), qt5 […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8934 Upstream summary: PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability). Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0027 Upstream summary: The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these […]
🟠 High ⏱ 30–90 min Last verified: 29 November 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38891, IBM Support Bulletin CVE: CVE-2021-38891 NVD summary: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:1338-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13636 CVE-2010-4651 CVE-2015-1196 CVE-2016-10713 CVE-2021-45261 CVE-2019-20633 CVE-2018-6952 CVE-2018-6951 Upstream summary: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other […]
🟡 Medium ⏱ 15–45 min Last verified: 28 November 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-20515, IBM Support Bulletin CVE: CVE-2021-20515 NVD summary: IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2019:3406 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
