Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
/sys/fs/cgroup is writable when cgroupns isn't unshared (CVE-2023-25809) Regression that reintroduced CVE-2019-19921 - Incorrect Access Control leading to Esca…
Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress.The flaw, des…
It was discovered that there were a number of vulnerabilies in the xrdp Remote Desktop Protocol (RDP) server: * CVE-2022-23480: Prevent a series of potential b…
The advanced persistent threat (APT) actor known as Winter Vivern is now targeting officials in Europe and the U.S. as part of an ongoing cyber espionage campa…
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to…
Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution.Tracked …
This update upgrades Thunderbird to version 102.9.0. * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs…
Incorrect code generation during JIT compilation. (CVE-2023-25751) Potential out-of-bounds when accessing throttled streams. (CVE-20223-25752) Invalid downcast…
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially …
Apache HTTP Server could allow unintended access to network services.
This update upgrades Firefox to version 102.9.0 ESR. * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs…
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1332
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1335
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1333
After rolling out the feature to its subscribers, NordVPN has now announced expanding Meshnet accessibility…NordVPN Rolls Out Meshnet For Public, Including Non…
Multiple high-impact security issues have been discovered in Thunderbird, which could result in denial of service (DoS) attacks leading to server crashes and l…
Remote code execution on feed enrichment. If "Extract full content from HTML5 and Google AMP" has been enabled for one or more feed subscriptions it is possibl…
The zero-day exploitation of a now-patched medium-severity security flaw in the FortinetFortiOSoperating system has been linked to a suspected Chinese hacking …
Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a p…
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
More than a dozen security flaws have been disclosed in E11, a smart intercom product made by Chinese company Akuvox."The vulnerabilities could allow attackers…
A change in the libreswan 4.2 Traffic Selector parsing code introduced a missing check that would reject palformed Traffic Selector payloads. As such, in such …
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1091
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1093
