🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17567 Upstream summary: Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1271 Upstream summary: The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4381 Related CVEs: CVE-2020-13558 CVE-2020-24870 CVE-2020-27918 CVE-2020-29623 CVE-2020-36241 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 +12 more Upstream summary: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15133 CVE-2019-19794 Upstream summary: A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS […]
🟠 High ⏱ 15–60 min Last verified: 14 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6335-1 Related CVEs: CVE-2021-28831 CVE-2022-48174 CVE-2021-42374 CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 +12 more Upstream summary: It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or […]
🟡 Medium ⏱ 10–30 min Last verified: 14 July 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:108-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-4122 CVE-2020-14382 Upstream summary: It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. […]
🟠 High ⏱ 30–90 min Last verified: 14 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38890, IBM Support Bulletin CVE: CVE-2021-38890 NVD summary: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account […]
🟡 Medium ⏱ 15–45 min Last verified: 13 July 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-34330, IBM Support Bulletin CVE: CVE-2022-34330 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in […]
🟢 Low ⏱ 10–30 min Last verified: 13 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2004-0828, IBM PSIRT advisory page CVE: CVE-2004-0828 NVD summary: The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f […]
🟢 Low ⏱ 10–30 min Last verified: 13 July 2022 Affected versions: IBM AIX 7.3 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2012-4833, IBM Support Bulletin CVE: CVE-2012-4833 NVD summary: fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users […]
