🟡 Medium ⏱ 10–30 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4879 CVE-2014-2383 CVE-2014-5011 CVE-2014-5012 CVE-2014-5013 CVE-2021-3838 CVE-2022-2400 Upstream summary: PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 Upstream summary: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}…) because of Object.prototype pollution. If an unsanitized source […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3886 Upstream summary: libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202209-04 Related CVEs: CVE-2021-29338 CVE-2022-1122 CVE-2018-21010 CVE-2019-12973 CVE-2020-15389 CVE-2020-27814 CVE-2020-27841 CVE-2020-27842 +3 more Upstream summary: Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Table […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5610-1 Related CVEs: CVE-2022-24713 Upstream summary: Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions (regex) it parses. An attacker could possibly use this […]
🟠 High ⏱ 30–90 min Last verified: 13 May 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2016-5985, IBM Support Bulletin CVE: CVE-2016-5985 NVD summary: The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9650 Related CVEs: CVE-2022-25647 CVE-2022-21540 CVE-2022-34169 CVE-2022-21541 CVE-2022-21549 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
How to Configure Windows Firewall Advanced Security via GPO on Windows Server 2012 R2 Windows Firewall with Advanced Security (WFAS) provides stateful packet inspection, inbound and outbound filtering, IPsec integration, and connection security rules. When managed via Group Policy, WFAS delivers consistent firewall configuration across all servers in the domain without requiring local administrator intervention […]
🟡 Medium ⏱ 15–45 min Last verified: 12 May 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29904, IBM Support Bulletin CVE: CVE-2021-29904 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — XSS vulnerabilities Related CVEs: CVE-2005-0961 CVE-2005-3759 CVE-2006-1491 CVE-2006-2195 CVE-2006-3548 CVE-2015-8807 CVE-2016-2228 Upstream summary: The Horde Team reports: Fixed XSS vulnerabilities in menu bar and form renderer. Table of […]
