🟢 Low ⏱ 5–30 min Last verified: 27 September 2022 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟢 Low ⏱ 5–15 min Last verified: 27 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: duo — Two-factor authentication bypass Upstream summary: The duo security team reports: An untrusted user may be able to set the http_proxy variable to an invalid address. If this happens, […]
🟢 Low ⏱ 5–15 min Last verified: 27 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14019 Upstream summary: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 27 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9525 Upstream summary: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks […]
🟡 Medium ⏱ 10–30 min Last verified: 27 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6685 CVE-2019-5477 CVE-2020-26247 CVE-2022-24836 CVE-2022-29181 Upstream summary: Nokogiri before 1.5.4 is vulnerable to XXE attacks Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 27 September 2022 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-0626 Related CVEs: CVE-2022-47629 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 27 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 CVE-2021-22926 CVE-2021-22931 CVE-2021-22946 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches, plus […]
🟢 Low ⏱ 10–30 min Last verified: 26 September 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2005-0261, IBM Support Bulletin CVE: CVE-2005-0261 NVD summary: lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read […]
🟢 Low ⏱ 10–30 min Last verified: 26 September 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2014-6195, IBM Support Bulletin CVE: CVE-2014-6195 NVD summary: The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on […]
🟢 Low ⏱ 5–15 min Last verified: 26 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ez-ipupdate — format string vulnerability Related CVEs: CVE-2004-0980 Upstream summary: Data supplied by a remote server is used as the format string instead of as parameters in a syslog() call. […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
