The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Mozilla Foundation has patched two zero-day flaws in its browser that could allow for remote code execution.
telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188) SL6 x86_64 telnet-0.17-49.el6_10.x86_64.rpm t…
The updated packages fix security vulnerabilities: There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2…
A serious vulnerability existed in the messenger app LINE that allowed admin access to Official Accounts. Line not only patchedCritical Vulnerability In LINE C…
The krb5 PAM module (pam_krb5.so) had a buffer overflow that might have caused remote code execution in situations involving supplemental prompting by a Kerber…
Zoom has been there for nine years, but the immediate requirement of an easy-to-use video conferencing app during the coronavirus pandemic made it overnight a …
Researchers found a critical vulnerability in CODESYS web server that could allow an attacker to conduct remote attacks. Fortunately, theHighly Critical And Ea…
Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code.
Multiple vulnerabilities have been found in GNU IDN Library 2, the worst of which could result in the remote execution of arbitrary code.
A buffer overflow in GNU Screen might allow remote attackers to corrupt memory.
While Apple has built a credible stance regarding users' privacy, a bug has recently made shown otherwise. As discovered, anUnpatched iOS Vulnerability Stops V…
A newly discovered watering-hole campaign is targeting Apple iPhone users in Hong Kong by using malicious website links as a lure to install spyware on the dev…
Multiple vulnerabilities have been found in Pure-FTPd, the worst of which could allow remote attackers to cause a Denial of Service condition. [More...]
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More...]
Multiple vulnerabilities have been found in Samba, the worst of which could lead to remote code execution.
Multiple vulnerabilities have been found in WeeChat, the worst of which could allow remote attackers to cause a Denial of Service condition.
Multiple vulnerabilities were found in Tor, the worst of which could allow remote attackers to cause a Denial of Service condition.
A vulnerability in BlueZ might allow remote attackers to bypass security restrictions.
IBus could allow local users to capture key strokes of other locally logged in users.
Have you heard that Firefox is planning to drop support for the vulnerable file transfer protocol in version 77 of the web browser?
Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files.
A vulnerability in Exim could allow a remote attacker to execute arbitrary code.
Vulnerability assessments are often carried out to help assure organizations are protected from well known vulnerabilities (low hanging fruit). AsTypes Of Vuln…
Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by default except on NVIDIA. List of CVEs fixed (since last update): * CVE-2019-20446 * …