🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:2898 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: The libtar packages contain a C library for manipulating tar archives. The library supports both the strict POSIX tar format and many of […]
🟢 Low ⏱ 5–15 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0465 Upstream summary: xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from […]
🟡 Medium ⏱ 10–30 min Last verified: 13 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sql-ledger — security bypass vulnerability Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-5872 Upstream summary: Chris Travers reports: George Theall of Tenable Security notified the LedgerSMB core team today of an authentication bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.8.113-r0 📖 ~4 min read • Source: Alpine secdb entry — gsoap 2.8.113-r0 Related CVEs: CVE-2021-21783 Upstream summary: Alpine community repository for vedge ships gsoap 2.8.113-r0 which addresses CVE-2021-21783. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 13 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libmysoft — Heap-based buffer overflow vulnerability Related CVEs: CVE-2021-3756 Upstream summary: Zhengjie Du reports: There are some heap-buffer-overflows in mysofa2json of libmysofa. They are in function loudness, mysofa_check and readOHDRHeaderMessageDataLayout. […]
🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15888 CVE-2020-15889 CVE-2020-15945 CVE-2020-24342 CVE-2020-24369 CVE-2020-24370 CVE-2020-24371 CVE-2021-43519 +5 more Upstream summary: Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based […]
🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2205 CVE-2011-2531 CVE-2011-2532 CVE-2014-2744 CVE-2014-2745 CVE-2016-0756 CVE-2016-1231 CVE-2016-1232 +12 more Upstream summary: Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202208-20 Related CVEs: CVE-2021-33193 CVE-2021-34798 CVE-2021-36160 CVE-2021-39275 CVE-2021-40438 CVE-2021-41524 CVE-2021-41773 CVE-2021-42013 +12 more Upstream summary: Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. […]
🟠 High ⏱ 15–60 min Last verified: 13 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1634 CVE-2010-2089 CVE-2010-3492 CVE-2011-1521 CVE-2011-3389 CVE-2011-4940 CVE-2011-4944 CVE-2012-0845 +12 more Upstream summary: Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 […]
Zero Trust Principles on Windows Server 2019 Zero Trust is a security philosophy that abandons the assumption of implicit trust inside a network perimeter. Instead, every access request—whether from inside or outside the datacenter—must be verified, authorized, and continuously validated. On Windows Server 2019, Zero Trust is implemented through a layered set of controls: strong […]
