🟡 Medium ⏱ 10–30 min Last verified: 25 April 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-49438 Upstream summary: An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1705 Related CVEs: CVE-2022-29916 CVE-2022-29912 CVE-2022-29914 CVE-2022-29917 CVE-2022-29909 CVE-2022-29911 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-22484 CVE-2023-22486 Upstream summary: cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9830 Related CVEs: CVE-2022-2585 CVE-2022-2586 CVE-2022-34918 CVE-2022-2588 CVE-2022-21385 CVE-2022-21546 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory ESSA-2025:0001 (see also SUSE bugzilla) Related CVEs: CVE-2023-40547 CVE-2022-28737 CVE-2020-10713 CVE-2023-40546 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551 CVE-2023-40548 +4 more Upstream summary: A remote code execution vulnerability was found in Shim. The Shim boot support […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202311-14 Related CVEs: CVE-2022-2601 CVE-2022-3775 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-28733 CVE-2022-28734 +3 more Upstream summary: Multiple vulnerabilities have been discovered in GRUB. Please review the CVE identifiers referenced below for details. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 24 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-2283 Related CVEs: CVE-2022-30629 CVE-2022-41717 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10018-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24976 CVE-2014-9773 CVE-2016-4478 CVE-2017-6384 Upstream summary: Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake […]
🟡 Medium ⏱ 5–30 min Last verified: 24 April 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:3027-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36033 Upstream summary: jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML […]
