🟡 Medium ⏱ 10–30 min Last verified: 25 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygems — request hijacking vulnerability Related CVEs: CVE-2013-4287 CVE-2013-4363 CVE-2015-3900 Upstream summary: Jonathan Claudius reports: RubyGems provides the ability of a domain to direct clients to a separate host that […]
🟡 Medium ⏱ 10–30 min Last verified: 25 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1362 CVE-2014-2913 CVE-2020-6581 CVE-2020-6582 Upstream summary: Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute arbitrary shell commands […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALEA-2022:1963 Upstream summary: This enhancement update adds the log4j:2 module to AlmaLinux (BZ#1937468) For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2029 Related CVEs: CVE-2022-44370 CVE-2020-18780 CVE-2020-21528 CVE-2022-46457 Upstream summary: NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 (CVE-2022-44370) Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-26874 Upstream summary: lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6730-1 Related CVEs: CVE-2022-29599 Upstream summary: It was discovered that Apache Maven Shared Utils did not handle double-quoted strings properly, allowing shell injection attacks. This could allow an attacker to […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5787-1 Related CVEs: CVE-2022-47629 CVE-2022-3515 Upstream summary: It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker could use this issue to cause Libksba to crash, resulting […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2927-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-32740 Upstream summary: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists […]
🟠 High ⏱ 30–90 min Last verified: 24 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2001-0797, IBM Support Bulletin CVE: CVE-2001-0797 NVD summary: Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments […]
🟡 Medium ⏱ 15–45 min Last verified: 24 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-35642, IBM Support Bulletin CVE: CVE-2022-35642 NVD summary: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
