Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities have been discovered in virglrenderer, the worst of which could result in remote code execution.
Linux's Wi-Fi code has some nasty bugs, which can be exploited simply by being near an attacker. Remote code execution is a possibility''no need to actually co…
Amazon Web Services (AWS) users get access to the popular Linux distro via virtual desktop.
Several security vulnerabilities were discovered in Wordpress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XS…
Douglas Mendizabal discovered that Barbican, the OpenStack Key Management Service, incorrectly parsed requests which could allow an authenticated user to bypas…
It was found that Barbican, a service for secret management and storage, was vulnerable to access bypass via query string injection. For Debian 10 buster, this…
An attacker can send a message with evil sdp to FreeSWITCH, which may a cause a crash due to an out-of-bounds access. (CVE-2022-31001) An attacker can send a m…
A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine (CVE-2022-31676). Referenc…
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. …
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Upstream details at : https://access.redhat.com/errata/RHSA-2022:5937
Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape).
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Multiple vulnerabilities have been discovered in Xen, the worst of which could result in remote code execution (guest sandbox escape).
Multiple vulnerabilities have been discovered in Apache Webserver, the worst of which could result in remote code execution.
A vulnerability in Motion allows a remote attacker to cause denial of service.
Multiple vulnerabilities have been found in Spice Server, the worst of which may result in the remote execution of arbitrary code.
Jaak Ristioja discovered a double-free vulnerability in GnuTLS, a library implementing the TLS and SSL protocols, during verification of pkcs7 signatures. A re…
If you use Linux, whether it is just to browse the web, use it as a VPN server, or even if you use it to hack people (Just kidding!), then it is pretty essenti…
It was discovered that libtirpc, a transport-independent RPC library, does not properly handle idle TCP connections. A remote attacker can take advantage of th…
Upstream details at : https://access.redhat.com/errata/RHSA-2022:5905
Upstream details at : https://access.redhat.com/errata/RHSA-2022:5773
Upstream details at : https://access.redhat.com/errata/RHSA-2022:5776
mod-wsgi could allow unintended access to network services.
