Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may haved crash with a NULL deref leading to a Denial-of-Service.
Several vulnerabilities have been identified in the VNC code of vino, a desktop sharing utility for the GNOME desktop environment.
We've been taught to look out for that little padlock to ensure a website is secure. But it's dangerous to rely on just one detail. Learn more:
Tim DàŒsterhus discovered that haproxy, a TCP/HTTP reverse proxy, did not properly sanitize HTTP headers when converting from HTTP/2 to HTTP/1. This would allo…
Several issues have been found in libvorbis, a decoder library for Vorbis General Audio Compression Codec.
Several issues have been found in libvpx, a VP8 and VP9 video codec. CVE-2019-9232
An issue in xmlrpc-epi, an XML-RPC request serialisation/deserialisation library, has been found.
An issue in bsdiff, a tool to generate/apply a patch between two binary files, has been found.
Several issues have been found in tiff, a Tag Image File Format library. CVE-2019-17546
Several flaws have been found in ruby2.1, an interpreter of an object-oriented scripting language.
It has been found, that libxdmcp, an X11 Display Manager Control Protocol library, uses weak entropy to generate keys.
An out-of-bounds write vulnerability was discovered in php-imagick, a PHP extension to create and modify images using the ImageMagick API, which could result i…
Several vulnerabilities have been discovered in the chromium web browser. CVE-2019-13723
An issue has been found in isc-dhcp, a server for automatic IP address assignment.
It has been found, that libice, an X11 Inter-Client Exchange library, uses weak entropy to generate keys.
There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.
It was discovered that pam-python, a PAM Module that runs the Python interpreter, has an issue in regard to the default environment variable handling of Python…
Hoger Just discovered an SQL injection in Redmine, a project management web application. In addition a cross-site scripting issue was found in Textile formatti…
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code executi…
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code executi…
It was discovered in the Simple Linux Utility for Resource Management (SLURM), a cluster resource management and job scheduling system did not escape strings w…
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system p…
Earlier versions of this package package were vulnerable to Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes.
A vulnerability was discovered in mosquitto, a MQTT version 3.1/3.1.1 compatible message broker, allowing a malicious MQTT client to cause a denial of service …
