FAIL › dossier
opensuse
VENDORDossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 25
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-09-19 | CVE-2022-28321 | critical | CVE-2022-28321: The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentica |
| 2020-05-01 | CVE-2020-10683 | critical | CVE-2020-10683: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Enti |
| 2020-02-24 | CVE-2020-1938 | critical | CVE-2020-1938: When using the Apache JServ Protocol (AJP), care must be taken when trusting inc |
| 2020-01-08 | CVE-2019-20367 | critical | CVE-2019-20367: nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison fo |
| 2019-09-16 | CVE-2019-5481 | critical | CVE-2019-5481: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. |
| 2019-09-16 | CVE-2019-5482 | critical | CVE-2019-5482: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. |
| 2019-07-18 | CVE-2019-13962 | critical | CVE-2019-13962: lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player t |
| 2019-06-19 | CVE-2019-12900 | critical | CVE-2019-12900: BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write |
| 2019-06-07 | CVE-2019-10160 | critical | CVE-2019-10160: A security regression of CVE-2019-9636 was discovered in python since commit d53 |
| 2019-05-30 | CVE-2019-8457 | critical | CVE-2019-8457: SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound re |
| 2019-03-25 | CVE-2019-3861 | medium | CVE-2019-3861: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH |
| 2019-03-25 | CVE-2019-3860 | medium | CVE-2019-3860: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFT |
| 2019-03-23 | CVE-2019-9948 | critical | CVE-2019-9948: urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes |
| 2019-03-21 | CVE-2019-3858 | medium | CVE-2019-3858: An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a special |
| 2019-03-21 | CVE-2019-3859 | critical | CVE-2019-3859: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh |
| 2019-03-21 | CVE-2019-3862 | high | CVE-2019-3862: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH |
| 2019-03-08 | CVE-2019-9636 | critical | CVE-2019-9636: Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handl |
| 2018-09-18 | CVE-2018-1000802 | critical | CVE-2018-1000802: Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Impro |
| 2018-05-10 | CVE-2018-1115 | critical | CVE-2018-1115: postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, |
| 2017-05-23 | CVE-2016-9841 | critical | CVE-2016-9841: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecif |
| 2017-05-23 | CVE-2016-9841 | critical | CVE-2016-9841: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecif |
| 2016-05-26 | CVE-2016-0718 | critical | CVE-2016-0718: Expat allows context-dependent attackers to cause a denial of service (crash) or |
| 2016-05-26 | CVE-2016-0718 | critical | CVE-2016-0718: Expat allows context-dependent attackers to cause a denial of service (crash) or |
| 2016-05-11 | CVE-2016-4117 | critical | CVE-2016-4117: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arb |
| 2016-05-11 | CVE-2016-4117 | critical | CVE-2016-4117: Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arb |
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.60
Vulnerability in adminpack extension allows attackers to force log rotation, indicating a significant security flaw in PostgreSQL's ACL handling.
Vulnerability in adminpack extension allows attackers to force log rotation, indicating a significant security flaw in PostgreSQL's ACL handling.
"postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation."
No usable content; bridge error.