🟢 Low ⏱ 5–15 min Last verified: 21 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2020:1633 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-ruby_parser — insecure tmp file usage Related CVEs: CVE-2013-0162 Upstream summary: Michael Scherer reports: This is a relatively minor tmp file usage issue. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 21 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeRadius — Multiple vulnerabilities Related CVEs: CVE-2004-0938 CVE-2004-0960 CVE-2004-0961 CVE-2005-1454 CVE-2005-1455 CVE-2005-4744 CVE-2005-4745 CVE-2006-1354 +5 more Upstream summary: Guido Vranken reports: Multiple vulnerabilities found via fuzzing: FR-GV-201 (v2,v3) Read / […]
🟠 High ⏱ 15–60 min Last verified: 21 June 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4627-1 Related CVEs: CVE-2020-8694 CVE-2020-12351 CVE-2020-12352 CVE-2020-24490 CVE-2020-16119 CVE-2020-16120 CVE-2020-14386 CVE-2020-12771 +12 more Upstream summary: Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5997-1 Related CVEs: CVE-2020-5208 Upstream summary: It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:2012-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33503 CVE-2018-20060 CVE-2019-9740 Upstream summary: An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority […]
🟠 High ⏱ 15–60 min Last verified: 21 June 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8067-1 Related CVEs: CVE-2021-44227 CVE-2021-43331 CVE-2021-43332 https://launchpad.net/bugs/1949401 https://launchpad.net/mailman/+bug/1949403 CVE-2021-42096 CVE-2021-42097 CVE-2020-15011 +7 more Upstream summary: It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-29510 Upstream summary: Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or […]
🟡 Medium ⏱ 10–30 min Last verified: 21 June 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4595 Related CVEs: CVE-2021-42574 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
