Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
An update that fixes one vulnerability is now available.
It was discovered that the daemon of the GNU Guix functional package manager was susceptible to privilege escalation. For additional information please refer t…
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1231714 Cross-References: * CVE-2024-41311
An update that fixes two vulnerabilities is now available.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-44244
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230930 Cross-References: * CVE-2024-47220
* bsc#1225972 * bsc#1231624 Cross-References: * CVE-2024-20697
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can mov…
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
Two vulnerabilities have been fixed in puma, a threaded HTTP server for Ruby/Rack applications.
Multiple vulnerabilities have been discovered in libgit2, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in EditorConfig Core C library, which may lead to arbitrary code execution.
A vulnerability has been discovered in Ubiquiti UniFi, which can lead to local privilege escalation.
