🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202210-11 Related CVEs: CVE-2022-2787 Upstream summary: schroot is unecessarily permissive in rules regarding chroot and session names. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟠 High ⏱ 15–60 min Last verified: 10 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Privoxy — Multiple vulnerabilities (memory leak, XSS) Related CVEs: CVE-2012-0920 CVE-2013-4421 CVE-2013-4434 CVE-2016-3116 CVE-2016-7406 CVE-2016-7407 CVE-2016-7408 CVE-2016-7409 +6 more Upstream summary: Privoxy reports: cgi_error_no_template(): Encode the template name to prevent […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-UI-Dialog — shell command execution vulnerability Related CVEs: CVE-2008-7315 Upstream summary: Matthijs Kooijman reports: It seems that the whiptail, cdialog and kdialog backends apply some improper escaping in their shell […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nbsmtp — format string vulnerability Upstream summary: When nbsmtp is executed in debug mode, server messages will be printed to stdout and logged via syslog. Syslog is used insecurely and […]
Introduction How to Configure Mandatory Access Control on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: punbb — NULL byte injection vulnerability Related CVEs: CVE-2006-4759 Upstream summary: CVE Mitre reports: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1863 Related CVEs: CVE-2022-1705 CVE-2022-1962 CVE-2022-1996 CVE-2022-24675 CVE-2022-27191 CVE-2022-27664 CVE-2022-28131 CVE-2022-28327 +8 more Upstream summary: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed […]
🟡 Medium ⏱ 10–30 min Last verified: 10 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5222-1 Related CVEs: CVE-2021-44832 CVE-2021-45105 CVE-2021-45046 CVE-2021-44228 Upstream summary: It was discovered that Apache Log4j 2 was vulnerable to remote code execution (RCE) attack when configured to use a JDBC […]
🟡 Medium ⏱ 10–30 min Last verified: 10 May 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5395-2 Related CVEs: https://launchpad.net/bugs/1971550 CVE-2022-29799 CVE-2022-29800 Upstream summary: USN-5395-1 fixed vulnerabilities in networkd-dispatcher. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6163-1 Related CVEs: CVE-2021-20307 CVE-2021-33293 Upstream summary: It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause […]
