Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The clie…
Cyber theft is when a hacker (or group of hackers) gains access to your computer…How to Prevent Cyber Theft? on Latest Hacking News
Several flaws have been discovered in HTCondor, a distributed workload management system, which allow users with only READ access to any daemon to use a differ…
Nokogiri did not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (s…
Updated microcodes for Intel processors, fixing various functional issues, and at least the following security issues: Sensitive information accessible by phys…
Several vulnerabilities were discovered in rsyslog, a system and kernel logging daemon. When a log server is configured to accept logs from remote clients thro…
Heads up, Zyxel customers! A severe security vulnerability riddled Zyxel firewalls, allowing remote command injection.…Serious Command Injection Vulnerability …
Months after Microsoft patched a remote code execution vulnerability in SharePoint, a new way to…New Exploit Emerges For A Previously Patched SharePoint Vulner…
Upstream details at : https://access.redhat.com/errata/RHSA-2022:4642
A vulnerability was reported in src:elog, a logbook system to manage notes through a Web interface. This vulnerability allows remote attackers to create a deni…
GNOME Settings could allow unintended access to network services.
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unex…
Upstream details at : https://access.redhat.com/errata/RHSA-2022:1440
Upstream details at : https://access.redhat.com/errata/RHSA-2022:2191
Upstream details at : https://access.redhat.com/errata/RHSA-2022:2213
Upstream details at : https://access.redhat.com/errata/RHSA-2022:1487
libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service. (CVE-2022-0856) References: - htt…
In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -…
Smarty3, a template engine for PHP, allowed template authors to run restricted static php methods. The same authors could also run arbitrary PHP code by crafti…
With the rise of cloud computing and mobility and the remote work environment brought on by the pandemic, securing Linux endpoint devices has never been more c…
With the rise of cloud computing and mobility and the remote work environment brought on by the pandemic, securing Linux endpoint devices has never been more c…
With the rise of cloud computing and mobility and the remote work environment brought on by the pandemic, securing Linux endpoint devices has never been more c…
Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
A buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using …
