🟢 Low ⏱ 5–15 min Last verified: 9 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 CVE-2020-11800 Upstream summary: Zabbix reports: Fixed security vulnerability cve-2020-11800 (remote code execution). (ZBX-17600) Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 5–30 min Last verified: 9 August 2022 Affected versions: Windows Server 2012 R2 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4172 Related CVEs: CVE-2021-3481 Upstream summary: Qt is a software toolkit for developing applications. The following packages have been upgraded to a later upstream version: adwaita-qt (1.2.1), python-qt5 (5.15.0), qgnomeplatform (0.7.1), qt5 […]
🟢 Low ⏱ 5–15 min Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3287 Upstream summary: lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0402 CVE-2007-3905 CVE-2008-3258 CVE-2008-6837 CVE-2008-6838 CVE-2009-2343 CVE-2014-9235 CVE-2014-9236 Upstream summary: SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16384 CVE-2019-11387 CVE-2019-11388 CVE-2019-11389 CVE-2019-11390 CVE-2019-11391 CVE-2019-13464 CVE-2020-22669 +8 more Upstream summary: A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through […]
Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up set up proxysql for mysql load balancing on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each […]
🟢 Low ⏱ 5–15 min Last verified: 9 August 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7208-1 Related CVEs: CVE-2022-42920 Upstream summary: Felix Wilhelm discovered that Apache Commons BCEL APIs incorrectly handled parameters due to a memory issue. An attacker supplying malicious input could exploit this […]
🟠 High ⏱ 30–90 min Last verified: 9 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2018-20733, IBM PSIRT advisory page CVE: CVE-2018-20733 NVD summary: BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. References: support.sas.com/kb/62/987.html support.sas.com/kb/62/987.html Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2938 CVE-2010-4255 CVE-2011-1166 CVE-2011-1583 CVE-2011-1898 CVE-2011-3131 CVE-2011-3262 CVE-2011-4111 +12 more Upstream summary: arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat […]
