🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:6608 Related CVEs: CVE-2022-31212 CVE-2022-31213 Upstream summary: dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-5851 Upstream summary: pkgsrc audit-packages flagged py{27,34,35}-docx<0.8.6 for vulnerability class 'xml-external-entity'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5851 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟡 Medium ⏱ 15–45 min Last verified: 2 July 2023 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-40231, IBM Support Bulletin CVE: CVE-2022-40231 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cinder — unauthorized data access Related CVEs: CVE-2014-3641 CVE-2022-47951 Upstream summary: Utkarsh Gupta reports: An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-36811 CVE-2016-10099 CVE-2016-10100 CVE-2017-15914 Upstream summary: borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ipython — Execution with Unnecessary Privileges Related CVEs: CVE-2022-21699 Upstream summary: IPython project reports: IPython 8.0.1, 7.31.1 and 5.11 are security releases that change some default values in order to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-2888 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 +10 more Upstream summary: pkgsrc audit-packages flagged SDL2<2.0.7 for vulnerability class 'integer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-2888 Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 2 July 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xrdp — privilege escalation Related CVEs: CVE-2017-16927 CVE-2022-23613 Upstream summary: xrdp project reports: An integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5022858 • MSRC update-guide entry Related CVEs: CVE-2023-21808 CVE-2023-21689 CVE-2023-21690 CVE-2023-21692 CVE-2023-21684 CVE-2023-21701 CVE-2023-21797 CVE-2023-21798 +12 more Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Windows Server 2019 […]
🟡 Medium ⏱ 10–30 min Last verified: 2 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3377 CVE-2007-3409 CVE-2007-6341 CVE-2008-1447 Upstream summary: Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the […]
