🟢 Low ⏱ 5–15 min Last verified: 21 November 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5559-1 Related CVEs: CVE-2022-24785 CVE-2022-31129 Upstream summary: It was discovered that Moment.js incorrectly handled certain input paths. An attacker could possibly use this issue to cause a loss of integrity […]
🟡 Medium ⏱ 10–30 min Last verified: 21 November 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:2134-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use gcc on IBM AIX 7.3 with practical examples […]
🟡 Medium ⏱ 15–45 min Last verified: 20 November 2022 Affected versions: IBM AIX 7.3 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2021-38955, IBM Support Bulletin CVE: CVE-2021-38955 NVD summary: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use lynis security auditing on ibm aix 7.2 on […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:2193 Related CVEs: CVE-2022-27664 CVE-2022-32189 Upstream summary: Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a later […]
🟠 High ⏱ 15–60 min Last verified: 20 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1572 CVE-2012-3426 CVE-2012-3542 CVE-2012-4413 CVE-2012-4456 CVE-2012-4457 CVE-2012-5571 CVE-2013-0247 +12 more Upstream summary: OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-34299 CVE-2022-32200 Upstream summary: There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 20 November 2022 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7711 Related CVEs: CVE-2022-24963 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 30–90 min Last verified: 20 November 2022 Affected versions: IBM AIX 7.3 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-3005, IBM Support Bulletin CVE: CVE-2013-3005 NVD summary: The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to […]
