SecPod

Learn Search

Search across all Learn content

← Back to Security Research

SCAP Feed Release : 28-Jun-2019

The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update.

Jun 27, 2019By Kumarswamy S2 min read

The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update.

oval:org.secpod.oval:def:1502554 CVE-2019-11707
CVE-2019-11708
ELSA-2019-1604
ELSA-2019-1604 — Oracle firefox
oval:org.secpod.oval:def:1502555 CVE-2019-11707
CVE-2019-11708
ELSA-2019-1603
ELSA-2019-1603 — Oracle firefox
oval:org.secpod.oval:def:1801469 10314
CVE-2019-10691
[3.8] dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack (CVE-2019-10691)
oval:org.secpod.oval:def:1801470 10562
CVE-2019-12735
[3.7] vim: arbitrary command execution in getchar.c (CVE-2019-12735)
oval:org.secpod.oval:def:1801471 10313
CVE-2019-10691
[3.9] dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack (CVE-2019-10691)
oval:org.secpod.oval:def:1801472 10387
CVE-2019-11494
CVE-2019-11499
[3.10] dovecot: Multiple vulnerabilities (CVE-2019-11494, CVE-2019-11499)
oval:org.secpod.oval:def:1801474 10361
CVE-2019-7317
[3.10] libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
oval:org.secpod.oval:def:1801475 10501
CVE-2019-12295
[3.10] wireshark: dissection engine crash (CVE-2019-12295)
oval:org.secpod.oval:def:1801476 10511
CVE-2018-16860
[3.10] heimdal: S4U2Self with unkeyed checksum (CVE-2018-16860)
oval:org.secpod.oval:def:1801477 10568
CVE-2019-12749
[3.10] dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass (CVE-2019-12749)
oval:org.secpod.oval:def:1801478 10317
CVE-2019-11358
[3.10] drupal7: Cross Site Scripting (CVE-2019-11358)
oval:org.secpod.oval:def:1801479 10312
CVE-2019-10691
[3.10] dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack (CVE-2019-10691)
oval:org.secpod.oval:def:1801480 10575
CVE-2019-12450
[3.10] glib: file permission vulnerability (CVE-2019-12450)
oval:org.secpod.oval:def:1801481 10590
CVE-2019-12435
CVE-2019-12436
[3.10] samba: Multiple vulnerabilities (CVE-2019-12435, CVE-2019-12436)
oval:org.secpod.oval:def:1801482 10431
CVE-2018-12558
[3.10] perl-email-address: DOS vulnerability in perl module Email::Address (CVE-2018-12558)
oval:org.secpod.oval:def:1801483 10367
CVE-2018-5743
CVE-2019-6467
[3.10] bind: Multiple vulnerabilities (CVE-2018-5743, CVE-2019-6467)
oval:org.secpod.oval:def:1801484 10409
CVE-2019-11555
[3.10] hostapd: EAP-pwd message reassembly issue with unexpected fragment (CVE-2019-11555)
oval:org.secpod.oval:def:1801485 10277
CVE-2019-11068
[3.10] libxslt: security framework bypass (CVE-2019-11068)
oval:org.secpod.oval:def:1801486 10414
CVE-2019-11555
[3.10] wpa_supplicant: EAP-pwd message reassembly issue with unexpected fragment (CVE-2019-11555)
oval:org.secpod.oval:def:1801487 10558
CVE-2019-12308
[3.10] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:1801488 10561
CVE-2019-12308
[3.7] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:1801489 10559
CVE-2019-12308
[3.9] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:1801490 10560
CVE-2019-12308
[3.8] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:705035 CVE-2017-12805
CVE-2017-12806
CVE-2018-14434
CVE-2018-15607
CVE-2018-16323
CVE-2018-16412
CVE-2018-16413
CVE-2018-16644
CVE-2018-16645
CVE-2018-17965
CVE-2018-17966
CVE-2018-18016
CVE-2018-18023
CVE-2018-18024
CVE-2018-18025
CVE-2018-18544
CVE-2018-20467
CVE-2019-10131
CVE-2019-10649
CVE-2019-10650
CVE-2019-11470
CVE-2019-11472
CVE-2019-11597
CVE-2019-11598
CVE-2019-7175
CVE-2019-7395
CVE-2019-7396
CVE-2019-7397
CVE-2019-7398
CVE-2019-9956
USN-4034-1
USN-4034-1 — imagemagick vulnerabilities
oval:org.secpod.oval:def:705041 CVE-2018-20843
USN-4040-1
USN-4040-1 — expat vulnerability
oval:org.secpod.oval:def:705042 CVE-2016-3189
CVE-2019-12900
USN-4038-1
USN-4038-1 — bzip2 vulnerabilities

Featured Posts

Open WHIPSHOT and SLAPSHOT: Citrix NetScaler Zero-Days Exploited to Plant Root Web Shells and Internal Tunnels
WHIPSHOT and SLAPSHOT: Citrix NetScaler Zero-Days Exploited to Plant Root Web Shells and Internal Tunnels

CVE Research

WHIPSHOT and SLAPSHOT: Citrix NetScaler Zero-Days Exploited to Plant Root Web Shells and Internal Tunnels

Oct 1, 2026

Open OpenSSL’s DTLS State Handling Error Opens the Door to Heap Data Exposure
OpenSSL’s DTLS State Handling Error Opens the Door to Heap Data Exposure

CVE Research

OpenSSL’s DTLS State Handling Error Opens the Door to Heap Data Exposure

Oct 1, 2026

Open Patch Analysis & Exploitation Timeline: Critical WSO2 and Adobe Flaws Show 1-Day vs. 133-Day Exploitation Window , September 24, 2026 KEV Additions
Patch Analysis & Exploitation Timeline: Critical WSO2 and Adobe Flaws Show 1-Day vs. 133-Day Exploitation Window , September 24, 2026 KEV Additions

CVE Research

Patch Analysis & Exploitation Timeline: Critical WSO2 and Adobe Flaws Show 1-Day vs. 133-Day Exploitation Window , September 24, 2026 KEV Additions

Two critical vulnerabilities added to CISA KEV on September 24, 2026 reveal sharply different exploitation timelines. CVE-2026-71362 saw publicly documented exploitation roughly one day after Adobe's patch release, while CVE-2026-5430 had a 133-day vendor-remediation-to-observed-exploitation interval.

Oct 1, 2026

Open Patch Analysis & Exploitation Timeline: Same-Week KEV Additions, Year-Apart Patch Dates - Linux Kernel, September 18, 2026
Patch Analysis & Exploitation Timeline: Same-Week KEV Additions, Year-Apart Patch Dates - Linux Kernel, September 18, 2026

CVE Research

Patch Analysis & Exploitation Timeline: Same-Week KEV Additions, Year-Apart Patch Dates - Linux Kernel, September 18, 2026

Three Linux kernel vulnerabilities entered CISA’s KEV catalog on September 18, 2026, although their Linux 6.12 fixes were available 91–386 days earlier. This analysis separates patch availability, CVE publication, and known-exploitation status without treating KEV dates as first-attack dates.

Sep 28, 2026