Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with u…
A vulnerability in LinuxCIFS may allow a remote code execution via a command line option.
A vulnerability in gpsd could allow remote code execution.
A buffer overflow in libuv might allow remote attacker(s) to execute arbitrary code.
netqmail could be made to crash or run programs as any user (except root) if it received specially crafted network traffic.
Mumble 1.3.2. === Client * Fixed: Overlay not starting (#4282) Server * Fixed: keychain-error on macOS for custom certificates (#4345) Known issues * Overlay b…
- Update to 4.3.1 - PowerDNS Security Advisory 2020-05 (CVE-2020-17482) Release notes: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1 S…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scri…
The popular Chinese social media app TikTok has once again made it to the news. But this time, it's notTikTok Glitch Allows Multi-Factor Authentication Bypass …
An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages p…
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite …
The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time. It fixes several security issues and other bugs. S…
grub2 updates for boothole vulnerabilities in f31/f32.
Google Chrome has just announced a serious change that may not be good news for many developers. In a surpriseGoogle Sunsets Chrome Web Store Payments System A…
Two issues have been found in nfdump, a netflow capture daemon. Both issues are related to either a buffer overflow or an integer overflow, which could result …
As the pandemic continues to accelerate the shift towards working from home, aÂslew of digital threatsÂhave capitalized on the health concern to exploit weakne…
Humans make mistakes, software has bugs and some of these bugs are exploitable vulnerabilities. The existence of vulnerabilities in software is not a new probl…
A back-end server associated with Microsoft Bing exposed sensitive data of the search engine's mobile application users, including search queries, device detai…
German authorities last weekÂdisclosedÂthat a ransomware attack on the University Hospital of DàŒsseldorf (UKD) caused a failure of IT systems, resulting in th…
Over the next couple of weeks and months, LinuxSecurity editors and contributors will be writing a series on Linux Web Server Security. This week, we're summar…
Dear Android users, if you use the Firefox web browser on your smartphones, make sure it has been updated to version 80 or the latest available version on the …
After a long wait and months of beta testing, Google last week finally released Android 11, the latest version of the Android mobile operating system'with feat…
The US Department of Justice (DoJ) on Tuesday indicted two hackers for their alleged involvement in defacing several websites in the country following the assa…
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
