Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The updated packages fix security vulnerabilities: Use-after-free in xmlEncodeEntitiesInternal() in entities.c. (CVE-2021-3516)
Avoid infinite loop by handling HUP event in client_work. (CVE-2021-3468) References: - https://bugs.mageia.org/show_bug.cgi?id=28901 - https://lists.opensuse.…
One security issue has been discovered in libgetdata CVE-2021-20204
The maintainers of Exim haveÂreleased patchesÂto remediate as many as 21 security vulnerabilities in its software that could enable unauthenticated attackers t…
postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694) * postgresql: Multiple features escape "security restricted operation" san…
A new academic study has highlighted a number of privacy and security pitfalls associated with recycling mobile phone numbers that could be abused to stage a v…
Apple on Monday released security updates forÂiOS,ÂmacOS, andÂwatchOSÂto address three zero-day flaws and expand patches for a fourth vulnerability that the co…
One security issue has been discovered in subversion: CVE-2020-17525:
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) wher…
This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files (CVE-2020-14409, CVE-2020-14410). Ref…
Farming isn't always safe from cyber threats ' at least, that's what some recently found…Security Vulnerabilities In John Deere API Could Expose Tractor Custom…
Multiple security vulnerabilities were found in Jackson Databind. CVE-2020-24616
This update provides the upstream 6.1.20 maintenance release that fixes atleast the following security vulnerabilities: A difficult to exploit vulnerability in…
The Drupal project identified a vulnerability in the sanitization performed in the _filter_xss_arttributes function, potentially allowing a cross-site scriptin…
Two security issues have been discovered in python2.7: CVE-2019-16935
Google Chrome 90 has arrived with new privacy features and fixes for 37 security flaws. Chrome users: this is an update you don't want to overlook!
A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote a…
Wireshark could open unsafe URLs (CVE-2021-22191). References: - https://bugs.mageia.org/show_bug.cgi?id=28687 - https://www.wireshark.org/security/wnpa-sec-20…
A critical vulnerability in the VMware Carbon Black Cloud Workload appliance could be exploited to bypass authentication and take control of vulnerable systems…
Updated ant packages fix security vulnerability: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so tha…
Updated ruby-em-http-request packages fix security vulnerability: A flaw was found in rubygem-em-http-request. The eventmachine library does not verify the hos…
Updated python-bottle packages fix security vulnerability: python-bottle before 0.12.19 is vulnerable to Web Cache Poisoning by using a vector called parameter…
Learn how to install SpiderFoot - an excellent open-source security scanner - to analyze vulnerabilities and malicious functions on Ubuntu Linux servers and as…
