🟡 Medium ⏱ 10–30 min Last verified: 9 February 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: piwigo — SQL injection Related CVEs: CVE-2013-1468 CVE-2013-1469 CVE-2020-8089 Upstream summary: Piwigo reports: Piwigo is affected by multiple SQL injection issues. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tcpslice — heap-based use-after-free in extract_slice() Related CVEs: CVE-2021-41043 Upstream summary: The Tcpdump Group reports: heap-based use-after-free in extract_slice() Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
Introduction Setting up install influxdb on oracle linux 8 on a Oracle Linux 8 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Install InfluxDB on Oracle Linux 8, with all the commands you need, the SELinux and firewalld considerations to keep in mind, and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2152 Related CVEs: CVE-2015-4645 CVE-2015-4646 CVE-2021-40153 CVE-2021-41072 Upstream summary: Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4605-1 Related CVEs: CVE-2020-15238 Upstream summary: Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could possibly use this issue […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4661-1 Related CVEs: CVE-2020-27348 https://launchpad.net/bugs/1901572 Upstream summary: It was discovered that Snapcraft includes the current directory when configuring LD_LIBRARY_PATH for application commands. If a user were tricked into installing a […]
🟡 Medium ⏱ 10–30 min Last verified: 9 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4888-1 Related CVEs: CVE-2020-27840 CVE-2021-20277 CVE-2019-3824 Upstream summary: Douglas Bagnall discovered that ldb, when used with Samba, incorrectly handled certain LDAP attributes. A remote attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 9 February 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:605-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8130 Upstream summary: There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202305-29 Related CVEs: CVE-2021-40153 CVE-2021-41072 Upstream summary: Multiple vulnerabilities have been discovered in squashfs-tools. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 9 February 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:0810-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11805 CVE-2019-12420 CVE-2020-1930 CVE-2020-1931 CVE-2020-1946 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 Upstream summary: In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands […]
