Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could result in remote code execution.
This update provides Firefox 117.0.1, with a significant security fix (for [CVE-2023-4863](https://access.redhat.com/security/cve/CVE-2023-4863)) and various b…
Open VM Tools could allow unintended access to network services.
A critical vulnerability was found in the OpenDMARC open-source implementation of the DMARC specification. It was discovered that OpenDMARC through 1.3.2 and 1…
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C:…
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem…
Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. (CVE-2023-40477) References: - https://bugs.mageia.org/show_bug.cgi?id=…
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a de…
The recent news regarding Red Hat's decision to limit access to the source code of their Red Hat Enterprise Linux (RHEL) distribution has garnered considerable…
Vulnerabilities were found in libssh2, a client-side C library implementing the SSH2 protocol, which could lead to denial of service or remote information disc…
Microsoft Internet Information Services (IIS) is a web server software package designed for Windows Server. Organizations commonly use Microsoft IIS servers to…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet…
Nine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories (SEL).“The most severe of those nine …
Security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in information disclosure, denial of servic…
Security Enhanced Linux (SELinux) has been part of the mainline kernel for two decades to provide a security module implementing access control security polici…
Cybersecurity and intelligence agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Thursday disclosed details of a mobile malware strain ta…
An open-source .NET-based information stealer malware dubbedSapphireStealeris being used by multiple entities to enhance its capabilities and spawn their own b…
An invalid memory access was discovered in json-c, a JSON library which could result in denial of service. For the oldstable distribution (bullseye), this prob…
Several issues have been found in qpdf, a package with tools for transforming and inspecting PDF files. Crafted files may enable remote attackers to execute ar…
Researchers discovered a reply URL flaw in Azure AD that could allow unauthorized access to…Microsoft Power Platform API Threatened Due To Reply URL Flaw on La…
Will the pre-pandemic norm of exclusively in-office work ever return? The answer is a resounding no. What was coined as the new normal in 2020 has seamlessly t…
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV, an anti-virus utility for Unix, could allow an unauthenticat…
A specific flaw within the processing of recovery volumes exists in RAR, an archive program for rar files. It allows remote attackers to execute arbitrary code…
A specific flaw within the processing of recovery volumes exists in UnRAR, an unarchiver for rar files. It allows remote attackers to execute arbitrary code on…
