🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.9.8-r3 📖 ~4 min read • Source: Alpine secdb entry — libxml2 2.9.8-r3 Related CVEs: CVE-2020-7595 CVE-2018-9251 CVE-2018-14404 CVE-2018-14567 CVE-2017-5969 CVE-2016-9318 CVE-2016-5131 CVE-2022-29824 +12 more Upstream summary: Alpine main repository for vedge ships libxml2 2.9.8-r3 which […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use nmon for performance monitoring on IBM AIX 7.3 […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13936 Upstream summary: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3607 Upstream summary: DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of […]
🟠 High ⏱ 15–60 min Last verified: 10 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7285 CVE-2016-3674 CVE-2017-7957 CVE-2019-10173 CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 CVE-2021-21341 +12 more Upstream summary: Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23395 Upstream summary: jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS). Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202408-28 Related CVEs: CVE-2022-24903 Upstream summary: Multiple vulnerabilities have been discovered in rsyslog. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6758-1 Related CVEs: CVE-2022-46175 Upstream summary: It was discovered that the JSON5 parse method incorrectly handled the parsing of keys named \_\_proto\_\_. An attacker could possibly use this issue to […]
🟡 Medium ⏱ 10–30 min Last verified: 10 December 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7529-1 Related CVEs: CVE-2022-33879 CVE-2022-30126 CVE-2022-30973 CVE-2020-1950 CVE-2020-1951 Upstream summary: It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. […]
