🟠 High ⏱ 15–60 min Last verified: 18 February 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6635-1 Related CVEs: CVE-2023-37453 CVE-2023-39189 CVE-2023-39192 CVE-2023-39193 CVE-2023-42754 CVE-2023-5158 CVE-2023-5178 CVE-2023-5717 +12 more Upstream summary: It was discovered that the USB subsystem in the Linux kernel contained a race condition […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5551-1 Related CVEs: CVE-2022-2255 Upstream summary: It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3030-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37464 Upstream summary: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). The AES GCM decryption routine incorrectly uses the Tag […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12019 Related CVEs: CVE-2022-3775 CVE-2022-2601 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-10081 Related CVEs: CVE-2022-2602 CVE-2022-3565 CVE-2022-4378 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟢 Low ⏱ 10–30 min Last verified: 17 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0851, IBM PSIRT advisory page CVE: CVE-1999-0851 NVD summary: Denial of service in BIND named via naptr. References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSS sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col www.securityfocus.com/bid/788 Table of contents Symptom & Impact Environment & Reproduction […]
🔴 Critical ⏱ 5–30 min Last verified: 17 February 2023 Affected versions: Oracle Linux 9 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 15–45 min Last verified: 17 February 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2023-30446, IBM Support Bulletin CVE: CVE-2023-30446 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-OWSLib — arbitrary file read vulnerability Related CVEs: CVE-2023-27476 Upstream summary: Jorge Rosillo reports: OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution for `lxml`, […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
