2024 - Page 1117 of 1224

FreeBSD 14 — apache-tomcat — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — apache-tomcat — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tomcat — XSS vulnerability in sample applications Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 Upstream summary: The Apache Project reports: The JSP and Servlet included in the sample application within the […]

Read more
Alpine Linux edge — filezilla — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — filezilla — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.66.4-r0 📖 ~4 min read  •  Source: Alpine secdb entry — filezilla 3.66.4-r0 Related CVEs: CVE-2023-48795 Upstream summary: Alpine community repository for vedge ships filezilla 3.66.4-r0 which addresses CVE-2023-48795. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — phpnuke — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — phpnuke — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Several vulnerabilities found in PHPNuke Related CVEs: CVE-2003-0279 CVE-2003-0318 CVE-2004-0266 CVE-2004-0269 Upstream summary: Janek Vind "waraxe" reports that several issues in the PHPNuke software may be exploited via carefully crafted […]

Read more
NetBSD 9.4 — mongrel — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — mongrel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-6612 Upstream summary: pkgsrc audit-packages flagged mongrel>=1.0.4<1.1.3 for vulnerability class 'directory-traversal'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6612 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 13 — emacs — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — emacs — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2005-0100 CVE-2008-3949 CVE-2012-3479 CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2024-30202  +5 more Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs […]

Read more
Debian 12 — ruby-bson — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — ruby-bson — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-4410 Upstream summary: The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows remote attackers to cause a denial of service (worker resource consumption) or perform a cross-site scripting […]

Read more
Amazon Linux 2 — grub2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — grub2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2292 Related CVEs: CVE-2023-4692 CVE-2023-4693 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734  +12 more Upstream summary: An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow […]

Read more
Debian 12 — archmage — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — archmage — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-1589 Upstream summary: Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot dot) in a CHM file. Table of […]

Read more
Debian 12 — hwloc — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — hwloc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-47022 Upstream summary: An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. Table […]

Read more
openSUSE Tumbleweed — subversion — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — subversion — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1161-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24070 CVE-2017-9800 CVE-2019-0203 CVE-2020-17525 CVE-2024-46901 CVE-2021-28544 CVE-2007-2448 CVE-2009-2411  +12 more Upstream summary: Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, […]

Read more
CHAT