🟡 Medium ⏱ 15–45 min Last verified: 28 January 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38933, IBM Support Bulletin CVE: CVE-2021-38933 NVD summary: IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:2099 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 15–45 min Last verified: 28 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-38982, IBM Support Bulletin CVE: CVE-2021-38982 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code […]
🟡 Medium ⏱ 15–45 min Last verified: 28 January 2022 Affected versions: IBM AIX 7.3 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2012-0723, IBM Support Bulletin CVE: CVE-2012-0723 NVD summary: The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpdf — stack based buffer overflow Related CVEs: CVE-2004-1125 CVE-2005-0064 CVE-2007-3387 Upstream summary: The KDE Team reports: kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying set up buildkite agent on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Set Up Buildkite Agent on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]
🟡 Medium ⏱ 10–30 min Last verified: 28 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RDoc — command injection vulnerability Related CVEs: CVE-2012-6708 CVE-2015-9251 CVE-2021-31799 Upstream summary: Alexandr Savca reports: RDoc used to call Kernel#open to open a local file. If a Ruby project has […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-1251 CVE-2019-19920 Upstream summary: Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains […]
🟢 Low ⏱ 5–15 min Last verified: 28 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hsftp format string vulnerabilities Upstream summary: Ulf Härnhammar discovered a format string bug in hsftp's file listing code may allow a malicious server to cause arbitrary code execution by the […]
