🟠 High ⏱ 15–60 min Last verified: 6 April 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:314-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33430 CVE-2021-41495 CVE-2021-41496 CVE-2017-12852 CVE-2019-6446 Upstream summary: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0132-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24828 CVE-2021-41116 CVE-2021-29472 Upstream summary: Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::getFileContent` can have a […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-7643 Related CVEs: CVE-2021-25220 CVE-2022-0396 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3602 CVE-2009-4008 CVE-2010-0969 CVE-2011-1922 CVE-2011-4528 CVE-2011-4869 CVE-2014-8602 CVE-2017-15105 +12 more Upstream summary: Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to […]
How to Configure USB Device Restriction via Group Policy on Windows Server 2012 R2 Removable storage devices represent a significant data exfiltration and malware introduction risk in any organization. USB flash drives, portable hard drives, and other removable media can bypass network-level security controls entirely. Windows Server 2012 R2 provides multiple mechanisms to restrict removable […]
🟡 Medium ⏱ 15–45 min Last verified: 5 April 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-20448, IBM Support Bulletin CVE: CVE-2021-20448 NVD summary: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering […]
🟡 Medium ⏱ 15–45 min Last verified: 5 April 2022 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2021-38994, IBM Support Bulletin CVE: CVE-2021-38994 NVD summary: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the […]
🟡 Medium ⏱ 10–30 min Last verified: 5 April 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4288 Related CVEs: CVE-2020-17541 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 5 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libevent — multiple vulnerabilities Related CVEs: CVE-2014-6272 CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Upstream summary: Debian Security reports: CVE-2016-10195: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have […]
Introduction How to Configure PHP Error Logging on CentOS Stream 9 on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration […]
