Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
F5 is warning of active abuse of a critical security flaw in BIG-IP less than a week after its public disclosure, resulting in the execution of arbitrary syste…
Heads up, phpFox users! A critical remote code execution vulnerability existed in the phpFox service…Critical PHPFox RCE Vulnerability Risked Social Networks o…
Virtualization services provider VMware has alerted customers to the existence of a proof-of-concept (PoC) exploit for a recently patched security flaw in Aria…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesdayaddeda high-severity flaw in Adobe Acrobat Reader to its Known Exploited Vulnerabili…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesdayaddeda high-severity flaw in Adobe Acrobat Reader to its Known Exploited Vulnerabili…
Passwords are at the core of securing access to an organization's data. However, they also come with security vulnerabilities that stem from their inconvenienc…
Security Configuration Assessment (SCA)is critical to an organization's cybersecurity strategy. SCA aims to discover vulnerabilities and misconfigurations that…
Cybersecurity agencies from Japan and the U.S. have warned of attacks mounted by a state-backed hacking group from China to stealthily tamper with branch route…
Multiple security vulnerabilities have been found in xrdp, a remote desktop protocol server. Buffer overflows and out-of-bound writes may cause a denial of ser…
vsftpd could allow unintended access to network services.
Multiple vulnerabilities have been discovered in Binwalk, the worst of which could result in remote code execution.
Multiple vulnerabilities have been discovered in Samba, the worst of which could result in root remote code execution.
Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could result in remote code execution.
This update provides Firefox 117.0.1, with a significant security fix (for [CVE-2023-4863](https://access.redhat.com/security/cve/CVE-2023-4863)) and various b…
Open VM Tools could allow unintended access to network services.
A critical vulnerability was found in the OpenDMARC open-source implementation of the DMARC specification. It was discovered that OpenDMARC through 1.3.2 and 1…
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C:…
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem…
Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. (CVE-2023-40477) References: - https://bugs.mageia.org/show_bug.cgi?id=…
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a de…
Vulnerabilities were found in libssh2, a client-side C library implementing the SSH2 protocol, which could lead to denial of service or remote information disc…
Microsoft Internet Information Services (IIS) is a web server software package designed for Windows Server. Organizations commonly use Microsoft IIS servers to…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet…
Nine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories (SEL).“The most severe of those nine …
