🟢 Low ⏱ 5–15 min Last verified: 9 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6303 Upstream summary: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 9 July 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7203-1 Related CVEs: CVE-2018-1046 CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 CVE-2020-17482 CVE-2022-27227 Upstream summary: Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0 📖 ~4 min read • Source: Alpine secdb entry — bridge 0 Related CVEs: CVE-2021-42533 CVE-2021-42719 CVE-2021-42720 CVE-2021-42722 CVE-2021-42725 Upstream summary: Alpine main repository for vedge ships bridge 0 which addresses CVE-2021-42533. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 9 July 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6243-1 Related CVEs: CVE-2017-18638 CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 Upstream summary: It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202407-27 Related CVEs: CVE-2021-22204 CVE-2022-23935 Upstream summary: Multiple vulnerabilities have been discovered in ExifTool. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 9 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5561-1 Related CVEs: CVE-2021-45085 CVE-2021-45086 CVE-2021-45087 CVE-2022-29536 Upstream summary: It was discovered that GNOME Web incorrectly filtered certain strings. A remote attacker could use this issue to perform cross-site scripting […]
🟢 Low ⏱ 5–15 min Last verified: 9 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5160-1 Related CVEs: CVE-2021-36370 Upstream summary: It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept […]
🟠 High ⏱ 15–60 min Last verified: 9 July 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1897-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41724 CVE-2022-41717 CVE-2022-41720 CVE-2022-2879 CVE-2022-2880 CVE-2022-41725 CVE-2022-41716 CVE-2022-27536 Upstream summary: Large handshake records may cause panics in crypto/tls. Both clients and servers may send large […]
🔴 Critical ⏱ 15–90 min Last verified: 9 July 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0088-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-35458 CVE-2021-25314 Upstream summary: An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id […]
🟠 High ⏱ 15–60 min Last verified: 9 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: squid — Multiple vulnerabilities Related CVEs: CVE-1999-0710 CVE-2004-0189 CVE-2004-0541 CVE-2004-0832 CVE-2004-0918 CVE-2005-0094 CVE-2005-0095 CVE-2005-0096 +12 more Upstream summary: The squid-cache project reports: Denial of Service in FTP Request/Response smuggling in […]
