Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
IBus could allow local users to capture key strokes of other locally logged in users.
Tomcat8 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulat…
Have you heard that Firefox is planning to drop support for the vulnerable file transfer protocol in version 77 of the web browser?
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files.
A vulnerability in Exim could allow a remote attacker to execute arbitrary code.
Vulnerability assessments are often carried out to help assure organizations are protected from well known vulnerabilities (low hanging fruit). AsTypes Of Vuln…
Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by default except on NVIDIA. List of CVEs fixed (since last update): * CVE-2019-20446 * …
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For the oldstable distribution (stre…
Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputStreamReady was missing protections against state confus…
A heap-based buffer overflow in Binary diff might allow remote attackers to execute arbitrary code.
A heap-based buffer overflow in GNU FriBidi might allow remote attackers to execute arbitrary code.
Multiple vulnerabilities have been found in Cacti, the worst of which could lead to the remote execution of arbitrary code.
tif_getimage.c in LibTIFF, as used in GDAL has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a …
Online guitar tutoring website TrueFire has apparently suffered a 'Magecart' style data breach incident that may have potentially led to the exposure of its cu…
In the latest Red Hat Product Security Risk Report, Red Hat reveals how it addresses security concerns both for Linux and open-source software.
Extending the list of security breach victims, another incident surfaces online exposing customers' data. This time, the affected firm isOpen Exchange Rates Di…
VMware has recently patched numerous bugs across multiple products. The most notable of all is a critical guest-to-host vulnerability affectingVMware Patched C…
Another unsecured database has leaked data online threatening the privacy of users. This time, the unsecured database belonging to aUnsecured Database Exposed …
Another malware has become active in the wild targeting Android devices. Dubbed Cookiethief, this Android malware does what its nameCookiethief Malware Targets…
Mozilla has released the updated version of its Firefox browser this week. With Firefox 74, Mozilla not only fixed numerousMozilla Released Firefox 74 With Sec…
This update upgrades Firefox to version 68.6.0 ESR. * Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputSt…
A heap-based buffer overflow in GStreamer Base Plugins might allow remote attackers to execute arbitrary code.
A buffer overflow in gdb might allow a remote attacker to cause a Denial of Service condition.
Cybercriminals will stop at nothing to exploit every chance to prey on internet users.Even the disastrous spread of SARS-COV-II (the virus), which causes COVID…
