🟢 Low ⏱ 5–15 min Last verified: 15 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3207 Upstream summary: Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to […]
MongoDB doesn’t have authentication enabled by default, meaning that any user with access to the server where the database is installed can add and delete data without restriction. In order to secure this vulnerability, this tutorial will walk you through creating an administrative user and enabling authentication on a CentOS 8 server. You’ll then test to confirm that only this administrative user has access to the database.
🟠 High ⏱ 15–60 min Last verified: 15 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1318 CVE-2002-2196 CVE-2003-0085 CVE-2003-0086 CVE-2003-0196 CVE-2003-0201 CVE-2004-0082 CVE-2004-0186 +12 more Upstream summary: Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service […]
Команда sudo полезна для выполнения команд с привилегиями, как правило, вне сферы полномочий вашего пользователя. В этом учебном модуле мы расскажем, как редактировать файлы конфигурации для настройки функций sudo.
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15108-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24761 CVE-2022-31015 Upstream summary: Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind […]
🟢 Low ⏱ 5–15 min Last verified: 14 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3845 Upstream summary: libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 14 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3126 CVE-2014-8123 Upstream summary: The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink […]
🟠 High ⏱ 15–60 min Last verified: 14 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1557 CVE-2004-0796 CVE-2005-1266 CVE-2005-3351 CVE-2006-2447 CVE-2007-0451 CVE-2007-2873 CVE-2017-15705 +7 more Upstream summary: Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows […]
🟡 Medium ⏱ 10–30 min Last verified: 14 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-5783 CVE-2012-6153 CVE-2014-3577 CVE-2015-5262 Upstream summary: Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that […]
🟢 Low ⏱ 5–15 min Last verified: 14 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-2996 Upstream summary: A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue […]
