🟡 Medium ⏱ 15–45 min Last verified: 19 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29833, IBM Support Bulletin CVE: CVE-2021-29833 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]
🟢 Low ⏱ 10–30 min Last verified: 19 November 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-35720, IBM Support Bulletin CVE: CVE-2022-35720 NVD summary: IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a […]
🟠 High ⏱ 30–90 min Last verified: 19 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2001-1330, IBM PSIRT advisory page CVE: CVE-2001-1330 NVD summary: Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. References: archives.neohapsis.com/archives/bugtraq/2001-06/ […]
🟡 Medium ⏱ 10–30 min Last verified: 19 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use ibm guardium database security on IBM AIX 7.3 […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-37819 Upstream summary: PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0510 CVE-2007-3299 Upstream summary: Multiple buffer overflows in (1) graphs.c, (2) output.c, and (3) preserve.c in AWFFull 3.7.1 and earlier have unknown impact and attack vectors. NOTE: some […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6459 Upstream summary: Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving […]
🟠 High ⏱ 15–60 min Last verified: 19 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33454 CVE-2021-33455 CVE-2021-33456 CVE-2021-33457 CVE-2021-33458 CVE-2021-33459 CVE-2021-33460 CVE-2021-33461 +12 more Upstream summary: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6153-1 Related CVEs: CVE-2022-39286 Upstream summary: It was discovered that Jupyter Core executed untrusted files in the current working directory. An attacker could possibly use this issue to execute arbitrary […]
