🟡 Medium ⏱ 10–30 min Last verified: 31 December 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5027-1 Related CVEs: CVE-2021-32610 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949 CVE-2018-1000888 Upstream summary: It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issue to […]
🔴 Critical ⏱ 15–90 min Last verified: 31 December 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2790-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22930 CVE-2019-9514 CVE-2019-9515 CVE-2019-9518 CVE-2020-11080 CVE-2020-7774 CVE-2020-8252 CVE-2020-8265 +12 more Upstream summary: Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free […]
🟡 Medium ⏱ 15–45 min Last verified: 30 December 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29692, IBM Support Bulletin CVE: CVE-2021-29692 NVD summary: IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport […]
🟡 Medium ⏱ 15–45 min Last verified: 30 December 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29810, IBM Support Bulletin CVE: CVE-2021-29810 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]
🟢 Low ⏱ 5–15 min Last verified: 30 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_access_referer — null pointer dereference vulnerability Related CVEs: CVE-2003-1054 Upstream summary: A malformed Referer header field causes the Apache ap_parse_uri_components function to discard it with the result that a pointer […]
🟡 Medium ⏱ 10–30 min Last verified: 30 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: GNU cpio — multiple vulnerabilities Related CVEs: CVE-2014-9112 CVE-2015-1197 CVE-2016-2037 CVE-2019-14866 Upstream summary: Sergey Poznyakoff reports: This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the –no-absolute-filenames option, […]
🟢 Low ⏱ 5–15 min Last verified: 30 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cURL — inappropriate GSSAPI delegation Related CVEs: CVE-2011-2192 Upstream summary: cURL reports: When doing GSSAPI authentication, libcurl unconditionally performs credential delegation. This hands the server a copy of the client's […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2019:3537 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 30 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Vim Shell Command Injection Vulnerabilities Related CVEs: CVE-2007-2953 CVE-2008-2712 Upstream summary: Rdancer.org reports: Improper quoting in some parts of Vim written in the Vim Script can lead to […]
🟢 Low ⏱ 5–15 min Last verified: 30 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PowerDNS — Denial of Service Vulnerability Related CVEs: CVE-2012-0206 Upstream summary: The PowerDNS Team reports: Using well crafted UDP packets, one or more PowerDNS servers could be made to enter […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
