🟢 Low ⏱ 5–15 min Last verified: 2 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17515 Upstream summary: etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0104 CVE-2019-10153 Upstream summary: In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL […]
Introduction to DHCP Server Authorisation on Windows Server 2019 DHCP Server Authorisation is an Active Directory feature that prevents rogue DHCP servers from operating in a domain environment. In a Windows domain, before a DHCP server will respond to client requests, it must verify that it is authorised in Active Directory. An unauthorised DHCP server […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7401 CVE-2013-7402 Upstream summary: The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 12.40-r0 📖 ~4 min read • Source: Alpine secdb entry — perl-image-exiftool 12.40-r0 Related CVEs: CVE-2022-23935 CVE-2021-22204 Upstream summary: Alpine community repository for vedge ships perl-image-exiftool 12.40-r0 which addresses CVE-2022-23935. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2131 CVE-2014-6262 Upstream summary: Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) […]
🔴 Critical ⏱ 15–90 min Last verified: 2 December 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:1018-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29155 CVE-2020-12243 CVE-2020-25692 CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 +12 more Upstream summary: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability […]
Always On VPN vs DirectAccess: Why the Upgrade Matters Always On VPN (AOVPN) is Microsoft’s modern replacement for DirectAccess, introduced with Windows 10 and Windows Server 2016. While DirectAccess provided transparent remote access using IPv6-over-IPv4 tunneling and IPsec, it was tightly coupled to Active Directory group policy, required IPv6 infrastructure, only supported domain-joined Windows Enterprise […]
🟠 High ⏱ 5–30 min Last verified: 1 December 2022 Affected versions: Ubuntu 22.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 15–45 min Last verified: 1 December 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-40750, IBM Support Bulletin CVE: CVE-2022-40750 NVD summary: IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]
