Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream details at : https://access.redhat.com/errata/RHSA-2021:2845
Upstream details at : https://access.redhat.com/errata/RHSA-2021:3028
Upstream details at : https://access.redhat.com/errata/RHSA-2021:1002
Networking equipment major Cisco has rolled out patches to address critical vulnerabilities impacting its Small Business VPN routers that could be abused by a …
HTCondor, a distributed workload management system, has Incorrect Access Control. It is possible to use a different authentication method to submit a job than …
Two security bugs in Zimbra webmail could allow an adversary to access and control mail…Zimbra Webmail Platform Vulnerabilities Discovered That Could Compromis…
The package vivaldi before version 4.1.2369.11-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoofi…
The package consul before version 1.9.8-1 is vulnerable to multiple issues including access restriction bypass and certificate verification bypass.
An Android malware that was observed abusing accessibility services in the device to hijack user credentials from European banking applications has morphed int…
* Properly set the cookies settings after a network process crash. * Fix accessibility tree after a cross site navigation with PSON enabled. * Ensure WebKitScr…
A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticat…
This update upgrades Thunderbird to version 78.12.0. * Mozilla: IMAP server responses sent by a MITM prior to STARTTLS could be processed (CVE-2021-29969) * Mo…
Microsoft Windows 10 and Windows 11 users are at risk of a new unpatched vulnerability that was recently disclosed publicly.As we reported last week, the vulne…
An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially result with remote…
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a differe…
In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU ty…
ooooooo_q discovered that the actionpack_page-caching Ruby gem, a static page caching module for Rails, allows an attacker to write arbitrary files to a web se…
Upstream details at : https://access.redhat.com/errata/RHSA-2021:2725
A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of …
perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input (CVE-2013-7488). …
Details have emerged about a high severity security vulnerability affecting a software driver used in HP, Xerox, and Samsung printers that has remained undetec…
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file" …
Multiple vulnerabilities have been found in RPM, the worst of which could result in remote code execution.
It is no secret that email is the preferred method of communication for businesses - a trend that has only been magnified with the increase in remote workers b…
