🟡 Medium ⏱ 15–45 min Last verified: 15 February 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2024-49349, IBM Support Bulletin CVE: CVE-2024-49349 NVD summary: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.1 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-15117 Upstream summary: pkgsrc audit-packages flagged synergy<1.4.14 for vulnerability class 'sensitive-information-disclosure'. Reference: http://synergy-foss.org/blog/synergy-1-4-14/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-23607 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36,37,38,39,310}-treq<22.1.0 for vulnerability class 'sensitive-information-disclosure'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-23607 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-amf — input sanitization errors Related CVEs: CVE-2015-8549 Upstream summary: oCERT reports: A specially crafted AMF payload, containing malicious references to XML external entities, can be used to trigger Denial […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36328 Upstream summary: Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). Table […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-703 Related CVEs: CVE-2024-29040 CVE-2023-22745 Upstream summary: tpm2-tss: arbitrary quote data may go undetected by Fapi_VerifyQuote (CVE-2024-29040) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:5994 Related CVEs: CVE-2023-40217 CVE-2023-24329 CVE-2022-40897 CVE-2022-48560 CVE-2022-48565 CVE-2023-43804 CVE-2024-22195 CVE-2023-32681 +12 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-31485 Upstream summary: GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nagios — Command Injection Vulnerability Related CVEs: CVE-2007-5803 CVE-2009-2288 Upstream summary: Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise […]
