🟡 Medium ⏱ 10–30 min Last verified: 15 July 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1102-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4899 CVE-2021-24031 CVE-2021-24032 CVE-2019-11922 Upstream summary: A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the […]
🟠 High ⏱ 30–90 min Last verified: 15 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-38890, IBM Support Bulletin CVE: CVE-2021-38890 NVD summary: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account […]
LDAP (Lightweight Directory Access Protocol) is the industry-standard protocol for centralised identity management, used to store and query user accounts, groups, and organisational data. OpenLDAP is the most widely deployed open-source LDAP server and is available in RHEL 8’s default repositories. Rather than a flat configuration file, modern OpenLDAP uses the on-line configuration (OLC) backend, […]
🟠 High ⏱ 30–90 min Last verified: 14 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0092, IBM PSIRT advisory page CVE: CVE-1999-0092 NVD summary: Various vulnerabilities in the AIX portmir command allows local users to obtain root access. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:2396 Related CVEs: CVE-2021-40153 CVE-2021-41072 Upstream summary: SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems. Security Fix(es): * squashfs-tools: unvalidated […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: coturn — information leakage Related CVEs: CVE-2020-4067 Upstream summary: Felix Dörre reports: The issue is that STUN/TURN response buffer is not initialized properly. (CWE 665) This is a leak of […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: krfb — Multiple security issues in bundled libvncserver Related CVEs: CVE-2014-4607 CVE-2014-6055 Upstream summary: Martin Sandsmark reports: krfb 4.14 [and earlier] embeds libvncserver which has had several security issues. Several […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdm — lock screen bypass when holding escape key Related CVEs: CVE-2011-0727 CVE-2015-7496 Upstream summary: Ray Strode reports: CVE-2015-7496 – lock screen bypass when holding escape key. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xtrlock — xtrlock does not block multitouch events Related CVEs: CVE-2005-0079 CVE-2016-10894 Upstream summary: Debian reports: xtrlock did not block multitouch events so an attacker could still input and thus […]
