🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202408-22 Related CVEs: CVE-2019-3881 CVE-2020-36327 CVE-2021-43809 Upstream summary: Multiple vulnerabilities have been discovered in Bundler. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 21 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35910 CVE-2020-35911 CVE-2020-35912 CVE-2020-35913 CVE-2020-35914 Upstream summary: An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness. […]
🟢 Low ⏱ 5–15 min Last verified: 21 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2035 Upstream summary: Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by […]
🟠 High ⏱ 15–60 min Last verified: 21 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1605 CVE-2005-0490 CVE-2005-3185 CVE-2005-4077 CVE-2006-1061 CVE-2007-3564 CVE-2009-0037 CVE-2009-2417 +12 more Upstream summary: curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 20 November 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7038 Related CVEs: CVE-2023-28100 CVE-2023-28101 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:2087 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]
🟠 High ⏱ 15–60 min Last verified: 20 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Payara — path trasversal flaw via either loc/con parameters in Eclipse Mojarra Related CVEs: CVE-2016-1000031 CVE-2016-5528 CVE-2017-12615 CVE-2017-3239 CVE-2017-3247 CVE-2017-3249 CVE-2017-3250 CVE-2018-14371 +7 more Upstream summary: Payara Releases reports: The […]
