Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In Horde Groupware, there has been an XSS via the Name field during creation of a new Resource. This could have been leveraged for remote code execution after …
Lucifer - a hybrid DDoS cryptomining botnet notorious for hijacking vulnerable Windows devices - is now also scanning for and infecting Linux systems.
Allocation for pixmap data in AllocatePixmap() does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X serv…
Kevin Backhouse discovered multiple vulnerabilies in the epson2 and epsonds backends of SANE, a library for scanners. A malicious remote device could exploit t…
A team of academic researchers'who previously made the headlines earlier this year for uncovering severe security issues in the 4G LTE and 5G networks'today pr…
Researchers found numerous critical vulnerabilities in Utilities VPNs. Exploiting these vulnerabilities could not only risk the OT networks of industriesCritic…
grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process (CVE-2020-10713) * grub2: grub_malloc does not validate allocation size a…
Cybersecurity researchers today disclosed several security issues in popular online dating platform OkCupid that could potentially let attackers remotely spy o…
Cybersecurity researchers today issued a security advisory warning enterprises and governments across the globe to immediately patch a highly-critical remote c…
Another vulnerable WordPress plugin has come to light. This time, the vulnerability appeared in the KingComposer WordPress plugin. It potentiallyXSS Vulnerabil…
Cybersecurity researchers today disclosed a new highly critical "wormable" vulnerability'carrying a severity score of 10 out of 10 on the CVSS scale'affecting …
An update for rh-dotnet31-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a securit…
An update for rh-dotnet21-dotnet is now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a securit…
Updated pdns-recursor package fixes security vulnerability: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via w…
Updated ntp packages fix security vulnerability: ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of servic…
Cybersecurity researchers today issued a security advisory warning enterprises and governments across the globe to immediately patch a highly-critical remote c…
Microsoft yesterday quietly released out-of-band software updates to patch two high-risk security vulnerabilities affecting hundreds of millions of Windows 10 …
This update includes a rebase from 9.0.34 up to 9.0.36 which resolves one CVE along with various other bugs/features: * rhbz#1838964 CVE-2020-9484 tomcat: Apac…
This update includes a rebase from 9.0.34 up to 9.0.36 which resolves one CVE along with various other bugs/features: * rhbz#1838964 CVE-2020-9484 tomcat: Apac…
Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the …
* Fix iptables No chain/target/match by that name (bz #1813830) * systemd: start libvirtd after firewalld/iptables services (bz #1697636) * CVE-2020-12430: mem…
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profi…
Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. ---- - Fix certificate chain validation involving the expired "AddTrust External Root".…
Updated xawtv packages fix security vulnerability: The v4l-conf program in xawtv allows users to determine the existence of file names in directories they do n…
