Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property.…
A basic Javascript WebSocket connection can trigger a local Log4j remote code attack via a drive-by compromise. Wonderful. Truly wonderful.
UPDATE— The severity score of CVE-2021-45046, originally classified as a DoS bug, has since been revised from 3.7 to 9.0, to reflect the fact that an attacker …
The dedicated call center software GoAutoDial has recently addressed numerous critical vulnerabilities, including remote code…Multiple Vulnerabilities Found In…
The Apache Software Foundation has released fixes to contain anactivelyexploitedzero-day vulnerability affecting the widely-used Apache Log4j Java-based loggin…
At least 17 malware-laced packages have been discovered on the NPM package Registry, adding to arecent barrage of malicious softwarehosted and delivered throug…
ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an…
The U.S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly pa…
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4788
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4913
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4785
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4782
An infinite loop when --sparse is used with file shrinkage during read access was fixed in the GNU tar archiving utility. For Debian 9 stretch, this problem ha…
Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python …
The security update of Salt, a remote execution manager, to fix CVE-2021-21996 introduced a regression in salt/fileclient.py which raised an unexpected excepti…
An authenticated remote attacker can execute arbitrary code in Firebird, a relational database based on InterBase 6.0, by executing a malformed SQL statement. …
Multiple security vulnerabilities have been discovered in Salt, a powerful remote execution manager, that allow for local privilege escalation on a minion, ser…
The package chromium before version 96.0.4664.45-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, content spoo…
The package opera before version 81.0.4196.54-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation and access restric…
Two issues have been found in netkit-rsh, client and server programs for remote shell connections. Due to insufficient input validation in path names sent by s…
Organizations have been worrying about cyber security since the advent of the technological age. Today, digital transformation coupled with the rise of remote …
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4134
Upstream details at : https://access.redhat.com/errata/RHSA-2021:3841
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4116
