🟢 Low ⏱ 5–15 min Last verified: 10 April 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4906-1 Related CVEs: CVE-2021-20305 CVE-2016-6489 Upstream summary: It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash, resulting in […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:2345-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-31252 CVE-2019-3690 CVE-2020-8013 CVE-2019-3688 Upstream summary: A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE […]
🟠 High ⏱ 15–60 min Last verified: 10 April 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24839 CVE-2022-28366 Upstream summary: org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when […]
🟠 High ⏱ 30–90 min Last verified: 10 April 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-20354, IBM Support Bulletin CVE: CVE-2021-20354 NVD summary: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request […]
How to Configure Windows Server 2019 Registry Settings The Windows Registry is a hierarchical database that stores configuration settings for the operating system, hardware, applications, and user profiles. Many Windows Server 2019 configurations that are not exposed through GUI interfaces are controlled exclusively through registry values. Understanding registry structure, safely reading and modifying values, using […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-XSLoader — local arbitrary code execution Related CVEs: CVE-2016-6185 Upstream summary: Jakub Wilk reports: XSLoader tries to load code from a subdirectory in the cwd when called inside a string […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: graylog — remote code execution in log4j from user-controlled log input Related CVEs: CVE-2021-44228 CVE-2021-45046 Upstream summary: Apache Software Foundation reports: It was found that the fix to address CVE-2021-44228 […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2020:1633 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]
🟢 Low ⏱ 5–15 min Last verified: 9 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0393 CVE-2004-0454 Upstream summary: Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in […]
