Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A critical security vulnerability has been disclosed inÂHAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary…
Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that's being used to hijack vulnerable Windows systems by levera…
Microsoft has shared technical details about a now-fixed, actively exploited critical security vulnerability affecting SolarWinds Serv-U managed file transfer …
An issue has been found in btrbk, a backup tool for btrfs subvolumes. Due to mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in au…
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may rem…
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may rem…
sssd: shell command injection in sssctl (CVE-2021-3621) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and …
A serious security vulnerability in Annke Network Video Recorder (NVR) could allow critical remote code…Critical Vulnerability In Annke Network Video Recorder …
Enterprise security and network appliance vendor F5 has released patches for more thanÂtwo dozen security vulnerabilitiesÂaffecting multiple versions of BIG-IP…
Enterprise security and network appliance vendor F5 has released patches for more thanÂtwo dozen security vulnerabilitiesÂaffecting multiple versions of BIG-IP…
MongoDB could provide unintended access.
edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe For more details about the security issue(s), including the impact, a CVSS score,…
Updated spice packages fix security vulnerability: A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers t…
Updated mariadb packages fix security vulnerabilities: A security issue has been found in the InnoDB component of MariaDB before version 10.6.4. A difficult to…
Lukas Euler discovered a path traversal vulnerability in commons-io, a Java library for common useful IO related classes. When invoking the method FileNameUtil…
A day after releasingÂPatch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, add…
A day after releasingÂPatch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, add…
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
Networking equipment major Cisco has rolled out patches to address critical vulnerabilities impacting its Small Business VPN routers that could be abused by a …
Two security bugs in Zimbra webmail could allow an adversary to access and control mail…Zimbra Webmail Platform Vulnerabilities Discovered That Could Compromis…
The package vivaldi before version 4.1.2369.11-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoofi…
The package consul before version 1.9.8-1 is vulnerable to multiple issues including access restriction bypass and certificate verification bypass.
* Properly set the cookies settings after a network process crash. * Fix accessibility tree after a cross site navigation with PSON enabled. * Ensure WebKitScr…
