🟡 Medium ⏱ 10–30 min Last verified: 23 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2016-9928 CVE-2017-5604 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 23 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11721 CVE-2017-6903 Upstream summary: Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4559 CVE-2012-4560 CVE-2012-4561 CVE-2012-4562 CVE-2012-6063 CVE-2013-0176 CVE-2014-0017 CVE-2014-8132 +12 more Upstream summary: Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4381 Related CVEs: CVE-2020-13558 CVE-2020-24870 CVE-2020-27918 CVE-2020-29623 CVE-2020-36241 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 +12 more Upstream summary: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later […]
🟢 Low ⏱ 5–15 min Last verified: 23 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6845-1 Related CVEs: CVE-2020-25638 Upstream summary: It was discovered that Hibernate incorrectly handled certain inputs with unsanitized literals. If a user or an automated system were tricked into opening a […]
🟠 High ⏱ 15–60 min Last verified: 23 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-2264 Related CVEs: CVE-2021-29956 CVE-2021-29967 CVE-2021-29957 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 30–90 min Last verified: 23 September 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29691, IBM Support Bulletin CVE: CVE-2021-29691 NVD summary: IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound […]
🟠 High ⏱ 30–90 min Last verified: 23 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-39002, IBM Support Bulletin CVE: CVE-2021-39002 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4424-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40153 CVE-2021-41072 CVE-2012-4025 CVE-2015-4645 CVE-2012-4024 Upstream summary: squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by […]
🟡 Medium ⏱ 10–30 min Last verified: 22 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — remote admin password reset vulnerability Related CVEs: CVE-2007-4894 CVE-2008-4107 CVE-2008-5278 CVE-2009-2762 Upstream summary: WordPress reports: A specially crafted URL could be requested that would allow an attacker to […]
