Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and th…
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox Apache PDFBox version 2.0.22 and prior 2.0.x…
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account …
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this,…
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, privilege escalation or memory disclosure.
It was discovered that there was a potential directory traversal issue in Django, a Python-based web development framework. The vulnerability could have been e…
The container suse/sle15 was updated. The following patches have been included in this update:
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
The container ses/7/ceph/grafana was updated. The following patches have been included in this update:
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
The container sles-15-sp2-chost-byos-v20210405 was updated. The following patches have been included in this update:
The container suse-sles-15-sp2-chost-byos-v20210405-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
Several vulnerabilities were discovered in smarty3, a template engine for PHP. CVE-2018-13982
Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC framework, is vulnerable to a code injection attack by passing specially formed parameters to URL t…
In XStream there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed …
The container suse/sles12sp4 was updated. The following patches have been included in this update:
The container suse/sles12sp3 was updated. The following patches have been included in this update:
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload (CVE-2020-7608). References: - https://bugs.m…
Multiple vulnerabilities were discovered in cURL, an URL transfer library: CVE-2020-8169
OpenSSL has patched two high-severity crypto bugs. Upgrade now!
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-27918
Moshe Kol and Shlomi Oberman of JSOF discovered several vulnerabilities in dnsmasq, a small caching DNS proxy and DHCP/TFTP server. They could result in denial…
The container suse/sle15 was updated. The following patches have been included in this update:
