🟢 Low ⏱ 5–15 min Last verified: 22 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-security — user redirect to arbitrary URL vulnerability Related CVEs: CVE-2021-23385 Upstream summary: Snyk reports: This affects all versions of package Flask-Security. When using the `get_post_logout_redirect` and `get_post_login_redirect` functions, it […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5680-1 Related CVEs: CVE-2019-20326 CVE-2020-36427 Upstream summary: It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202007-63 Related CVEs: CVE-2020-24361 Upstream summary: It was found that SNMP Trap Translator does not drop privileges as configured and does not properly escape shell commands in certain functions. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4640-1 Related CVEs: CVE-2020-16123 CVE-2020-15710 CVE-2020-11931 https://launchpad.net/bugs/1877102 Upstream summary: James Henstridge discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle snap client connections. An attacker could possibly use this […]
🟢 Low ⏱ 5–15 min Last verified: 22 March 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5232-1 Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-21428 CVE-2019-12211 CVE-2015-0852 CVE-2016-5684 CVE-2019-12213 Upstream summary: Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3944-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13645 Upstream summary: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to […]
How to Configure Nginx as a Reverse Proxy on RHEL 7 A reverse proxy sits in front of one or more backend application servers, forwarding incoming client requests and returning the backend responses. Nginx is exceptionally well-suited for this role due to its event-driven architecture and low memory footprint. On RHEL 7, a common pattern […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202103-20 Related CVEs: CVE-2021-26701 CVE-2021-24112 CVE-2021-1723 CVE-2021-1721 CVE-2021-31204 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 5.0.3.sdk103-2. Fixed in: 5.0.4.sdk104-1. Group: AVG-1698. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-7541 Related CVEs: CVE-2022-24736 CVE-2022-24735 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
