The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections…
This update provides the upstream 7.0.8 maintenance release that fixes at least the following security vulnerabilities: Vulnerability in the Oracle VM VirtualB…
Several vulnerabilities have been discovered in apache2, a webserver that may be used as front-end proxy for other applications. These vulnerabilities may lead…
Multiple security issues were discovered in 389-ds-base: an open source LDAP server for Linux. CVE-2019-3883
This kernel-linus update is based on upstream 5.15.106 and fixes atleast the following security issues: A flaw was found in the Linux Kernel. The tun/tap socke…
This kernel update is based on upstream 5.15.106 and fixes atleast the following security issues: A flaw was found in the Linux Kernel. The tun/tap sockets hav…
Updated firefox and libwebp packages fix security vulnerabilities: Unexpected data returned from the Safe Browsing API could have led to memory corruption and …
OpenAI, the company behind the massively popular ChatGPT AI chatbot, has launched abug bounty programin an attempt to ensure its systems are "safe and secure."…
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially allowing User Enumeration, Cross-Site-Scripting or …
Multiple security vulnerabilities have been discovered in OpenImageIO, a library for reading and writing images. Buffer overflows and out-of-bounds read and wr…
Buffer overrun in util.c (CVE-2022-4899) References: - https://bugs.mageia.org/show_bug.cgi?id=31740 - https://lists.suse.com/pipermail/sle-security-updates/20…
Multiple security vulnerabilities have been discovered in OpenImageIO, a library for reading and writing images. Buffer overflows and out-of-bounds read and wr…
Multiple security issues were discovered in svgpp: a C++ library for parsing and rendering Scalable Vector Graphics (SVG) files. CVE-2021-44960
Multiple potential security vulnerabilities in some Intel® Processors have been found which may allow information disclosure or may allow escalation of privile…
For over a decade now the X.Org Server has been seeing routine security disclosures in its massive codebase with some security researchers saying it's even wor…
Several security vulnerabilities have been discovered in unbound, a validating, recursive, caching DNS resolver. CVE-2022-3204
Apple on Monday backported fixes for an actively exploited security flaw to older iPhone and iPad models.The issue, tracked asCVE-2023-23529, concerns a type c…
Denial of service using crafted input. (CVE-2022-40152) References: - https://bugs.mageia.org/show_bug.cgi?id=31665 - https://lists.suse.com/pipermail/sle-secu…
Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a p…
Microsoft's Patch Tuesday update for March 2023 is rolling out with remediations for a set of80 security flaws, two of which have come under active exploitatio…
High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30 High CVE-2023-1214: Type Confusion in V8. Reported b…
A security issue has been discovered in xfig, a diagramming tool for the interactive generation of figures under X11. CVE-2021-40241:
Multiple security vulnerabilities have been discovered in Apache HTTP server. CVE-2006-20001