🟡 Medium ⏱ 10–30 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4024 CVE-2012-4025 CVE-2015-4645 CVE-2015-4646 CVE-2021-40153 CVE-2021-41072 Upstream summary: Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4879 CVE-2014-2383 CVE-2014-5011 CVE-2014-5012 CVE-2014-5013 CVE-2021-3838 CVE-2022-2400 Upstream summary: PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 Upstream summary: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}…) because of Object.prototype pollution. If an unsanitized source […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3886 Upstream summary: libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202209-04 Related CVEs: CVE-2021-29338 CVE-2022-1122 CVE-2018-21010 CVE-2019-12973 CVE-2020-15389 CVE-2020-27814 CVE-2020-27841 CVE-2020-27842 +3 more Upstream summary: Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Table […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5610-1 Related CVEs: CVE-2022-24713 Upstream summary: Addison Crump discovered that rust-regex did not properly limit the complexity of the regular expressions (regex) it parses. An attacker could possibly use this […]
🟠 High ⏱ 30–90 min Last verified: 13 May 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2016-5985, IBM Support Bulletin CVE: CVE-2016-5985 NVD summary: The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9650 Related CVEs: CVE-2022-25647 CVE-2022-21540 CVE-2022-34169 CVE-2022-21541 CVE-2022-21549 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟡 Medium ⏱ 15–45 min Last verified: 12 May 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29904, IBM Support Bulletin CVE: CVE-2021-29904 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde — XSS vulnerabilities Related CVEs: CVE-2005-0961 CVE-2005-3759 CVE-2006-1491 CVE-2006-2195 CVE-2006-3548 CVE-2015-8807 CVE-2016-2228 Upstream summary: The Horde Team reports: Fixed XSS vulnerabilities in menu bar and form renderer. Table of […]
