🟢 Low ⏱ 5–15 min Last verified: 7 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15216 CVE-2020-7711 Upstream summary: In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5704-1 Related CVEs: CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 CVE-2020-12049 CVE-2019-12749 CVE-2015-0245 CVE-2014-7824 CVE-2014-3635 +7 more Upstream summary: It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker […]
🔴 Critical ⏱ 15–90 min Last verified: 7 July 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-30498 CVE-2021-30499 CVE-2022-0856 CVE-2021-3410 CVE-2018-20547 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 +2 more Upstream summary: A flaw was found in libcaca. A heap buffer overflow in export.c in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:7681 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat […]
🟠 High ⏱ 15–60 min Last verified: 7 July 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7943-1 Related CVEs: CVE-2022-0856 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 +2 more Upstream summary: Han Zheng discovered that libcaca incorrectly handled certain images. An attacker could possibly use this […]
🟠 High ⏱ 30–90 min Last verified: 6 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0687, IBM PSIRT advisory page CVE: CVE-1999-0687 NVD summary: The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. References: sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col www.ciac.org/ciac/bulletins/k-001.shtml www.securityfocus.com/bid/637 Table […]
🟡 Medium ⏱ 15–45 min Last verified: 6 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-38712, IBM Support Bulletin CVE: CVE-2022-38712 NVD summary: "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or […]
🟡 Medium ⏱ 10–30 min Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-twisted — cookie and authorization headers are leaked when following cross-origin redirects Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers report: Cookie and Authorization headers are […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-064 Related CVEs: CVE-2021-40490 Upstream summary: No CVE associated with this advisory Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fontconfig — insufficiently cache file validation Related CVEs: CVE-2016-5384 Upstream summary: Debian security team reports: Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration […]
