🟡 Medium ⏱ 10–30 min Last verified: 17 September 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7368-1 Related CVEs: CVE-2017-18640 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML […]
🟠 High ⏱ 30–90 min Last verified: 17 September 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2016-10086, IBM PSIRT advisory page CVE: CVE-2016-10086 NVD summary: RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or […]
🟠 High ⏱ 15–60 min Last verified: 17 September 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1465-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46146 Upstream summary: Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:1586 Related CVEs: CVE-2019-13012 CVE-2020-13543 CVE-2020-13584 CVE-2020-16125 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 CVE-2021-1817 +4 more Upstream summary: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later […]
🔴 Critical ⏱ 15–90 min Last verified: 17 September 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14645-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-30595 CVE-2020-35653 CVE-2020-35655 CVE-2021-25291 CVE-2014-3589 CVE-2014-3598 CVE-2016-0740 CVE-2016-0775 +3 more Upstream summary: libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0011-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-21653 Upstream summary: Jawn is an open source JSON parser. Extenders of the `org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFacade` who don't override `objectContext()` are vulnerable to a hash […]
Grafana Unified Alerting, introduced in Grafana 9 and enabled by default in Grafana 10+, provides a centralised alerting engine that works across all data sources and replaces the older per-panel Legacy Alerting system. On RHEL 9, configuring Grafana alerting correctly means setting up contact points for notification delivery, building a notification policy routing tree that […]
🟡 Medium ⏱ 15–45 min Last verified: 16 September 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29813, IBM Support Bulletin CVE: CVE-2021-29813 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]
🟠 High ⏱ 5–30 min Last verified: 16 September 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 16 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt — buffer overflow vulnerability Related CVEs: CVE-2007-2683 Upstream summary: Securityfocus reports: Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using […]
