🟡 Medium ⏱ 15–45 min Last verified: 6 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-34336, IBM Support Bulletin CVE: CVE-2022-34336 NVD summary: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in […]
🟡 Medium ⏱ 15–45 min Last verified: 6 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2010-2090, IBM Support Bulletin CVE: CVE-2010-2090 NVD summary: The npb_protocol_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX (aka CSAIX or CS/AIX) in sna.rte […]
🟡 Medium ⏱ 10–30 min Last verified: 6 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — unbounded recursion in urlpreview Related CVEs: CVE-2019-5885 CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 Upstream summary: Matrix developers report: This release fixes a vulnerability with Synapse's URL preview […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to apply technology level updates on IBM AIX 7.3 with […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202210-06 Related CVEs: CVE-2020-14339 CVE-2020-25637 CVE-2021-3631 CVE-2021-3667 CVE-2022-0897 Upstream summary: Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 6 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8141 Upstream summary: The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if […]
🟡 Medium ⏱ 10–30 min Last verified: 6 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8857 CVE-2015-8858 CVE-2022-37598 Upstream summary: The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to […]
🟠 High ⏱ 15–60 min Last verified: 6 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10672 CVE-2019-16091 CVE-2019-16092 CVE-2019-16093 CVE-2019-16094 CVE-2019-16095 CVE-2019-20016 CVE-2019-20063 +7 more Upstream summary: treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 6 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8659 CVE-2017-5226 CVE-2019-12439 CVE-2020-5291 Upstream summary: Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated […]
🟢 Low ⏱ 5–15 min Last verified: 6 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5667 Upstream summary: Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web […]
