Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
release v1.14.0
release v1.14.0
Update to 131.0.6778.204 High CVE-2024-12692: Type Confusion in V8 High CVE-2024-12693: Out of bounds memory access in V8 High CVE-2024-12694: Use after free i…
Update to 1.24.10, fixes multiple CVEs.
Update to 1.24.10, fixes multiple CVEs.
Update to 1.24.10, fixes multiple CVEs.
Update to 1.24.10, fixes multiple CVEs.
Update to 1.24.10, fixes multiple CVEs.
XStream is a simple java library to serialize objects to XML and back again. Two vulnerabilities were fixed: CVE-2021-43859:
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted pa…
Matrix-js-sdk has insufficient MXC URI validation which could allow client-side path traversal. (CVE-2024-50336) References: - https://bugs.mageia.org/show_bug…
RCE due to TOCTOU issue in JSP compilation. (CVE-2024-50379) DoS in examples web application. (CVE-2024-54677) References: - https://bugs.mageia.org/show_bug.c…
Multiple vulnerabilities were found in sqlparse, a non-validating SQL parser for Python, which can lead to Denial of Service. CVE-2021-32839
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were found in python-urllib3, an HTTP library with thread-safe connection pooling for Python, which could lead to information disclosu…
It was discovered that there was a remotely exploitable vulnerability in php-laravel-framework, a popular web application framework written in PHP.
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
Update to v2.14
Open-source data and intelligence availability have partly enabled legal and illegal actions. These resources leverage public data to address cyber threats whi…
* bsc#1223098 Cross-References: * CVE-2024-27306
* bsc#1232432 * bsc#1233479 * bsc#1233557 Cross-References:
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
