🟢 Low ⏱ 5–15 min Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Template::Toolkit — Directory traversal on write Related CVEs: CVE-2019-19781 Upstream summary: Art Manion and Will Dormann report: By using an older and less-secure form of open(), it is possible for […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-2726 Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. […]
🟢 Low ⏱ 5–15 min Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟢 Low ⏱ 5–15 min Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 27 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8305 Upstream summary: The UDFclient (before 0.8.8) custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library (e.g., glibc) that […]
🟢 Low ⏱ 5–15 min Last verified: 27 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2002 CVE-2013-2005 Upstream summary: Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5080-2 Related CVEs: CVE-2021-33560 CVE-2021-40528 CVE-2019-13627 CVE-2018-0495 CVE-2017-7526 CVE-2017-9526 CVE-2016-6313 Upstream summary: USN-5080-1 fixed several vulnerabilities in Libgcrypt. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:1838 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 30–90 min Last verified: 27 November 2021 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2021-38990, IBM Support Bulletin CVE: CVE-2021-38990 NVD summary: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command […]
🟠 High ⏱ 15–60 min Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: flash — multiple vulnerabilities Related CVEs: CVE-2008-4546 CVE-2009-3793 CVE-2009-3794 CVE-2009-3796 CVE-2009-3797 CVE-2009-3798 CVE-2009-3799 CVE-2009-3800 +12 more Upstream summary: Adobe reports: These updates resolve type confusion vulnerabilities that could lead to […]
