AZL-74967 CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other TypedArray instances like Uint8Array may contain leftover...

CVE-2025-58592

creationtimestamp| type| source ---|---|--- 2026-01-20 20:11:54+00:00| seen| Telegram/DkDeYi-7Rvu3dvNFxTYyhbNcEyCrXaYDZoW6IId1LXCHe4c...

CVE-2025-54721

creationtimestamp| type| source ---|---|--- 2026-01-20 20:11:47+00:00| seen| Telegram/Dq8idxvfZe5fhzXxSGOIklyuUdW9GuQzRcuXaJIrodTXq4...

Debian: Security Advisory (DLA-4443-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 8 : yajl-2.1.0-11.el8 (AXSA:2022-4173:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4173:02 advisory. yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Tenable has extracted the preceding description block...

MiracleLinux 7 : firefox-115.9.1-1.0.1.el7.AXS7 (AXSA:2024-7633:11)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7633:11 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Mozilla: Crash in NSS TLS method CVE-2024-0743 Mozilla: JIT code failed to save return...

MiracleLinux 9 : transfig-3.2.7b-11.el9_7 (AXSA:2026-046:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-046:01 advisory. xfig: xfig: Stack-overflow allows possible code execution via local input manipulation CVE-2025-46397 Tenable has extracted the preceding description block...

MiracleLinux 8 : poppler-20.11.0-11.el8 (AXSA:2024-8323:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8323:02 advisory. poppler: NULL pointer dereference in FoFiType1C::convertToType1 CVE-2020-36024 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : java-11-openjdk-11.0.18.0.10-2.el9 (AXSA:2023-5032:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5032:05 advisory. OpenJDK: handshake DoS attack against DTLS connections JSSE, 8287411 CVE-2023-21835 OpenJDK: soundbank URL remote loading Sound, 8293742...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.262.b10-0.el7 (AXSA:2020-221:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-221:11 advisory. OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access Libraries, 8238920 CVE-2020-14583 OpenJDK: Incomplete bounds checks in Affine...

MiracleLinux 8 : patch-2.7.6-11.el8 (AXSA:2020-262:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-262:01 advisory. patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files CVE-2019-13636 Tenable has extracted the preceding...

MiracleLinux 4 : rpcbind-0.2.0-11.AXS4 (AXSA:2016-006:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2016-006:01 advisory. The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a...

Debian: Security Advisory (DLA-4439-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4438-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-0959 Out-of-bounds Write in Wireshark

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

Microsoft Windows Remote Assistance 安全漏洞

Microsoft Windows Remote Assistance is a windows feature from Microsoft Corporation USA for viewing or controlling a remote Windows computer to solve a problem without having to touch the device directly. A security vulnerability exists in Microsoft Windows Remote Assistance. An attacker exploiti...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications via a key system. A security vulnerability exists i...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:Windows 10...