🟢 Low ⏱ 5–15 min Last verified: 26 January 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6402-1 Related CVEs: CVE-2023-36328 Upstream summary: It was discovered that LibTomMath incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code and cause a denial […]
🟠 High ⏱ 15–60 min Last verified: 26 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6110-1 Related CVEs: CVE-2021-28275 CVE-2021-28277 CVE-2021-3496 https://launchpad.net/bugs/2020068 CVE-2021-34055 CVE-2022-41751 CVE-2019-1010301 CVE-2019-1010302 +6 more Upstream summary: It was discovered that Jhead did not properly handle certain crafted Canon images when processing […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5031442 • MSRC update-guide entry Related CVEs: CVE-2023-35349 CVE-2023-41765 CVE-2023-41770 CVE-2023-41768 CVE-2023-41767 CVE-2023-41771 CVE-2023-41769 CVE-2023-41773 +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]
La pila de software LEMP es un grupo de elementos de software que puede utilizarse para ofrecer páginas web y aplicaciones web dinámicas escritas en PHP. El nombre “LEMP” es un acrónimo que hace referencia a un sistema operativo Linux con un servidor web Nginx (se…
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6558-1 Related CVEs: CVE-2018-13440 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 Upstream summary: It was discovered that audiofile could be made to dereference invalid memory. If a user or an automated system were tricked […]
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5030271 • MSRC update-guide entry Related CVEs: CVE-2023-38161 CVE-2023-38152 CVE-2023-38144 CVE-2023-38143 CVE-2023-38142 CVE-2023-38141 CVE-2023-38139 CVE-2023-36804 +2 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Table of contents Symptom […]
🟠 High ⏱ 30–90 min Last verified: 26 January 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2007-4791, IBM Support Bulletin CVE: CVE-2007-4791 NVD summary: Buffer overflow in the swcons command in bos.rte.console in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors, a […]
What Are Shielded VMs and Why They Exist Shielded Virtual Machines are a Windows Server 2016+ security feature that protects virtual machine data and state from access by Hyper-V administrators, backup operators, and anyone else with physical or software-level access to the virtualization fabric. In a conventional Hyper-V environment, a fabric administrator — someone with […]
🟠 High ⏱ 15–60 min Last verified: 26 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0404 CVE-2007-0405 CVE-2007-5712 CVE-2007-5828 CVE-2008-2302 CVE-2008-3909 CVE-2009-2659 CVE-2009-3695 +12 more Upstream summary: bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the […]
