🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7542 Upstream summary: A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202007-24 Related CVEs: CVE-2020-10108 CVE-2020-10109 CVE-2022-21712 CVE-2022-21716 CVE-2022-39348 Upstream summary: Multiple vulnerabilities have been discovered in Twisted. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5953-1 Related CVEs: CVE-2015-5607 CVE-2022-21699 Upstream summary: It was discovered that IPython incorrectly processed REST API POST requests. An attacker could possibly use this issue to launch a cross-site request […]
How to Set Up Site-to-Site VPN with RRAS on Windows Server 2012 R2 A site-to-site VPN connects two geographically separate networks over the internet as if they were directly connected. Windows Server 2012 R2 RRAS (Routing and Remote Access Service) can act as a VPN gateway for site-to-site connections, establishing persistent encrypted tunnels between a […]
🟡 Medium ⏱ 10–30 min Last verified: 16 March 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5459-1 Related CVEs: CVE-2020-14342 CVE-2021-20208 CVE-2022-27239 CVE-2022-29869 Upstream summary: Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-9267 Related CVEs: CVE-2021-27918 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1966 Related CVEs: CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 CVE-2022-44729 CVE-2022-44730 Upstream summary: Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. […]
🟠 High ⏱ 30–90 min Last verified: 16 March 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-20373, IBM Support Bulletin CVE: CVE-2021-20373 NVD summary: IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9950 Related CVEs: CVE-2022-21628 CVE-2022-21618 CVE-2022-21624 CVE-2022-2097 CVE-2022-32213 CVE-2022-32212 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202312-06 Related CVEs: CVE-2020-18771 CVE-2020-18773 CVE-2020-18774 CVE-2020-18899 CVE-2021-29457 CVE-2021-29458 CVE-2021-29463 CVE-2021-29464 +12 more Upstream summary: Multiple vulnerabilities have been discovered in Exiv2. Please review the CVE identifiers referenced below for details. Table […]
