2022 - Page 757 of 828

Debian 11 — node-xmlhttprequest — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-xmlhttprequest — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-28502 Upstream summary: This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into […]

Read more
Alpine Linux edge — coredns — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — coredns — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.9.3-r0 📖 ~4 min read  •  Source: Alpine secdb entry — coredns 1.9.3-r0 Related CVEs: CVE-2022-27191 CVE-2022-28948 Upstream summary: Alpine community repository for vedge ships coredns 1.9.3-r0 which addresses CVE-2022-27191. Table of contents Symptom & Impact […]

Read more
FreeBSD 13 — ilohamail — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ilohamail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: "Content-Type" XSS vulnerability affecting other webmail systems Related CVEs: CVE-2004-0519 Upstream summary: Roman Medina-Heigl Hernandez did a survey which other webmail systems where vulnerable to a bug he discovered in […]

Read more
FreeBSD 13 — bogofilter-tdb — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bogofilter-tdb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bogofilter — RFC 2047 decoder denial-of-service vulnerability Related CVEs: CVE-2004-1007 Upstream summary: The bogofilter team has been provided with a test case of a malformatted (non-conformant) RFC-2047 encoded word that […]

Read more
Gentoo Linux — media-libs/libaom — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — media-libs/libaom — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202401-32 Related CVEs: CVE-2020-36129 CVE-2020-36130 CVE-2020-36131 CVE-2020-36133 CVE-2020-36134 CVE-2020-36135 CVE-2021-30473 CVE-2021-30474  +1 more Upstream summary: Multiple vulnerabilities have been discovered in libaom. Please review the CVE identifiers referenced below for details. Table […]

Read more
Debian 11 — mathjax — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — mathjax — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1999024 Upstream summary: MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running […]

Read more
Ubuntu 18.04 — atftp — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — atftp — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6334-1 Related CVEs: CVE-2020-6097 CVE-2021-41054 CVE-2021-46671 CVE-2019-11365 CVE-2019-11366 Upstream summary: Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp […]

Read more
How to Configure Managed Service Accounts on Windows Server 2016 — step-by-step Windows Server 2016 tutorial on Progressive Robot

How to Configure Managed Service Accounts on Windows Server 2016

How to Configure Windows Server 2016 Managed Service Accounts Managed Service Accounts (MSAs) were introduced in Windows Server 2008 R2 to address the administrative overhead of managing service account passwords. In Windows Server 2016, MSAs continue to provide automatic password management and simplified Service Principal Name (SPN) management for services running on a single computer. […]

Read more
CHAT