🟢 Low ⏱ 5–15 min Last verified: 27 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: magento — multiple vulnerabilities Related CVEs: CVE-2012-3363 Upstream summary: Magento, Inc. reports: SUPEE-6482 – This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 – This […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2020 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:14763-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-15522 CVE-2019-15523 Upstream summary: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2020 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4231 Related CVEs: CVE-2018-25014 CVE-2018-25010 CVE-2018-25013 CVE-2020-36331 CVE-2018-25012 CVE-2020-36332 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🔴 Critical ⏱ 15–90 min Last verified: 27 January 2020 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2136-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18906 CVE-2017-9270 Upstream summary: A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with […]
🟡 Medium ⏱ 5–30 min Last verified: 26 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 5–30 min Last verified: 26 January 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tor — security regression Related CVEs: CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427 CVE-2014-5117 CVE-2017-0377 Upstream summary: The Tor Project reports: Tor 0.3.0.9 fixes a path selection bug that would allow […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4457-2 Related CVEs: CVE-2020-15709 Upstream summary: USN-4457-1 fixed a vulnerability in Software. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jason A. Donenfeld discovered that […]
🟠 High ⏱ 5–30 min Last verified: 26 January 2020 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5173-1 Related CVEs: CVE-2019-14462 CVE-2019-14463 Upstream summary: It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service or other […]
