🟡 Medium ⏱ 10–30 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Upstream summary: PHP reports: Core: Fixed bug #70172 (Use After Free Vulnerability in unserialize()). Fixed bug #70219 (Use after […]
🟠 High ⏱ 5–30 min Last verified: 29 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 29 April 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]
🟢 Low ⏱ 5–15 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sinatra — XSS vulnerability Related CVEs: CVE-2018-11627 Upstream summary: Sinatra blog: Sinatra had a critical vulnerability since v2.0.0. The purpose of this release is to fix CVE-2018-11627. The vulnerability is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.0.3-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-mistune 2.0.3-r0 Related CVEs: CVE-2022-34749 Upstream summary: Alpine community repository for vedge ships py3-mistune 2.0.3-r0 which addresses CVE-2022-34749. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic of an TLS handshake using […]
🟡 Medium ⏱ 5–30 min Last verified: 29 April 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟠 High ⏱ 15–60 min Last verified: 29 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postgresql — multiple vulnerabilities Related CVEs: CAN-2005-1409 CAN-2005-1410 CVE-2005-0227 CVE-2005-0244 CVE-2005-0245 CVE-2005-0246 CVE-2005-0247 CVE-2006-2313 +6 more Upstream summary: The PostgreSQL developers report: PostgreSQL allows users to create indexes on the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202407-17 Related CVEs: CVE-2021-42373 CVE-2021-42374 CVE-2021-42375 CVE-2021-42376 CVE-2021-42377 CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 +7 more Upstream summary: Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Table […]
🟠 High ⏱ 15–60 min Last verified: 29 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-4798 CVE-2006-5872 CVE-2007-0667 CVE-2007-1329 CVE-2007-1436 CVE-2007-1437 +12 more Upstream summary: SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches […]
