Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Due to improper input validation, Squid is vulnerable to an HTTP Request Smuggling attack. This problem allows a trusted client to perform HTTP Request
Several vulnerabilities were discovered in the shadow suite of login tools. An attacker may escalate privileges in specific configurations. CVE-2017-20002
On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), …
When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the di…
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one …
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary cod…
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-snapshotter was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-resizer was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-provisioner was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-node-driver-registrar was updated. The following patches have been included in this update:
The container ses/7/cephcsi/csi-attacher was updated. The following patches have been included in this update:
The container suse/sle-micro/5.0/toolbox was updated. The following patches have been included in this update:
The container suse-sles-15-sp2-chost-byos-v20210304-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp2-chost-byos-v20210304-gen2 was updated. The following patches have been included in this update:
The container sles-15-sp2-chost-byos-v20210304 was updated. The following patches have been included in this update:
The container sles-15-sp1-chost-byos-v20210304 was updated. The following patches have been included in this update:
The container suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The SolarWinds Sunburst attack has been in the headlines since it was first discovered in December 2020.ÂAs the so-called layers of the onion are peeled back, …
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthen…
A directory traversal vulnerability was discovered in python-flask-cors, a Flask extension for handling Cross Origin Resource Sharing (CORS), allowing to acces…
Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or i…
Two vulnerabilities were discovered in yaws, a high performance HTTP 1.1 webserver written in Erlang. CVE-2020-24379
