🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-45139 Upstream summary: fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6374-1 Related CVEs: CVE-2023-4874 CVE-2023-4875 CVE-2021-32055 CVE-2022-1328 Upstream summary: It was discovered that Mutt incorrectly handled certain email header contents. If a user were tricked into opening a specially crafted […]
In programming, there will be many occasions in which you will want different blocks of code to run depending on user input or other factors. As an example, you might want a form to submit if each field is filled out properly, but you might want to prevent that form from…
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5023696 • MSRC update-guide entry Related CVEs: CVE-2023-21708 CVE-2023-23404 CVE-2023-23411 CVE-2023-23415 CVE-2023-23416 CVE-2023-1017 CVE-2023-1018 CVE-2023-23385 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Table of contents Symptom […]
Percona Monitoring and Management (PMM) is an open-source platform that provides deep visibility into MySQL, MariaDB, PostgreSQL, and MongoDB performance — including query analytics, slow-query identification, and time-series dashboards — without requiring a commercial licence. Running PMM Server as a Docker container keeps the server component isolated and easy to upgrade, while the lightweight PMM […]
🟠 High ⏱ 30–90 min Last verified: 3 April 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-20354, IBM Support Bulletin CVE: CVE-2021-20354 NVD summary: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5025285 • MSRC update-guide entry Related CVEs: CVE-2023-21554 CVE-2023-28219 CVE-2023-28220 CVE-2023-28231 CVE-2023-28232 CVE-2023-28250 CVE-2023-21769 CVE-2023-21729 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Table of contents Symptom […]
Docker es una aplicación que simplifica el proceso de administración de procesos de aplicación en contenedores. Los contenedores le permiten ejecutar sus aplicaciones en procesos con aislamiento de recursos. Son similares a las máquinas virtuales,…
🟠 High ⏱ 5–30 min Last verified: 2 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: Oracle Bug 31274238 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟡 Medium ⏱ 15–45 min Last verified: 2 April 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2023-47747, IBM Support Bulletin CVE: CVE-2023-47747 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to […]
