🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6060 CVE-2014-7912 CVE-2014-7913 CVE-2016-1503 CVE-2016-1504 CVE-2019-11577 CVE-2019-11578 CVE-2019-11579 +1 more Upstream summary: The get_option function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-19865 Upstream summary: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15168 CVE-2022-0235 Upstream summary: node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was […]
Introduction This guide explains how to Configure SSH Hardening on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-10073 Upstream summary: The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7360-1 Related CVEs: CVE-2020-14929 CVE-2021-38370 CVE-2021-46853 Upstream summary: It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6158-1 Related CVEs: CVE-2022-0235 Upstream summary: It was discovered that Node Fetch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202407-02 Related CVEs: CVE-2022-27470 Upstream summary: A vulnerability has been discovered in SDL_ttf. Please review the CVE identifier referenced below for details. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 15–45 min Last verified: 18 March 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-20579, IBM Support Bulletin CVE: CVE-2021-20579 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create […]
