Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A buffer overflow in libuv might allow remote attacker(s) to execute arbitrary code.
The package chromium before version 85.0.4183.121-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, information…
An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages p…
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite …
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334,…
As the pandemic continues to accelerate the shift towards working from home, aÂslew of digital threatsÂhave capitalized on the health concern to exploit weakne…
Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet.
Dear Android users, if you use the Firefox web browser on your smartphones, make sure it has been updated to version 80 or the latest available version on the …
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
The package chromium before version 85.0.4183.102-1 is vulnerable to multiple issues including access restriction bypass and arbitrary code execution.
Samba would allow unintended access to files over the network.
Samba would allow unintended access to files over the network.
QEMU: usb: out-of-bounds r/w access issue [XSA-335, CVE-2020-14364] (#1871850)
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
QEMU: usb: out-of-bounds r/w access issue [XSA-335, CVE-2020-14364] (#1871850)
The package python-django before version 3.1.1-1 is vulnerable to multiple issues including access restriction bypass and insufficient validation.
The package ark before version 20.08.0-2 is vulnerable to arbitrary filesystem access.
Cisco has patched a critical vulnerability in Jabber for Windows desktop collaboration app. Exploiting the flaw could allow remote codeCritical Vulnerability F…
Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMISerious…
Multiple vulnerabilities have been found in Dovecot, the worst of which could allow remote attackers to cause a Denial of Service condition.
Slack has recently fixed a critical remote code execution vulnerability affecting its desktop apps. This RCE flaw posed a seriousSlack Patched A Critical RCE F…
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. Thi…
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-i…
In Horde Groupware, there has been an XSS via the Name field during creation of a new Resource. This could have been leveraged for remote code execution after …
