Advisory ROSA-SA-2026-3130

software: libxml2 2.9.14 OS: ROSA-CHROME unaffected versions = libxml2-2.9.14-12 affected versions libxml2-2.9.14-12 CVE-ID: CVE-2025-6021 BDU-ID: 2025-07144 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the xmlBuildQName function of the Libxml2 library is related to a stack-based buffer overflow...

EVerest security vulnerabilities

EVerest is an open-source firmware for electric vehicle charging stations developed by EVerest. Versions of EVerest prior to 2025.12.1 contain security vulnerabilities. These vulnerabilities stem from a vulnerability that allows bypassing sequence state verification and authentication, potentiall...

Medium: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue. CVE-2025-68618 ImageMagick is free and open-source softwa...

SUSE SLES12: libsnmp40 / libsnmp40-32bit / net-snmp / net-snmp-devel / perl-SNMP / etc (SUSE-SU-2026:0195-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0195-1 advisory. - CVE-2025-68615: Fixed snmptrapd buffer overflow bsc1255491 Tenable has extracted the preceding description block directly from the SUSE security...

CVE-2025-59556

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:55+00:00| seen| Telegram/QnrH5g5OwGBUAy6ScRFD4MTujgrWMEa1D4kehJKdWHvpG4...

CVE-2025-58996

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:55+00:00| seen| Telegram/QnrH5g5OwGBUAy6ScRFD4MTujgrWMEa1D4kehJKdWHvpG4...

CVE-2025-58619

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:13+00:00| seen| Telegram/o0PAyJQKhHLgWKeUAL4lh3yyPkFb6kcoOvCJ43T8NfWAuHA...

ROOT-OS-DEBIAN-12-CVE-2026-23490 CVE-2026-23490 in rootio-pyasn1 - Patched by Root

Root has patched CVE-2026-23490 in the rootio-pyasn1 package for Root:Debian:12. Multiple fixed versions available...

MiracleLinux 8 : postgresql:12 (AXSA:2022-3790:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3790:01 advisory. postgresql: Autovacuum, REINDEX, and others omit security restricted operation sandbox CVE-2022-1552 Tenable has extracted the preceding description block...

MiracleLinux 8 : kernel-4.18.0-305.el8 (AXSA:2021-2148:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2148:12 advisory. kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 kernel: memory leak in sofsetgetlargectrldata function in sound/soc/sof/ipc.c...

MiracleLinux 8 : postgresql:12 (AXSA:2022-3939:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3939:01 advisory. postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : thunderbird-91.13.0-1.el8.ML.1 (AXSA:2022-3794:12)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3794:12 advisory. Mozilla: Address bar spoofing via XSLT error handling CVE-2022-38472 Mozilla: Cross-origin XSLT Documents would have inherited the parent's...

Debian: Security Advisory (DSA-6102-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 7 : patch-2.7.1-12.el7 (AXSA:2019-4344:02)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4344:02 advisory. patch: doedscript in pch.c does not block strings beginning with a ! character CVE-2018-20969 patch: OS shell command injection when processing...

MiracleLinux 3 : quota-3.13-8.AXS3 (AXSA:2013-12:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-12:01 advisory. The quota package contains system administration tools for monitoring and limiting user and or group disk usage per filesystem. Security issues fixed with this...

MiracleLinux 4 : ruby-1.8.7.352-12.AXS4 (AXSA:2013-564:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-564:02 advisory. Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system...

Debian: Security Advisory (DSA-6101-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-73RR-HH4G-FPGX

creationtimestamp| type| source ---|---|--- 2026-01-15 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mchjx2qz4s2a 2026-01-19 09:40:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mcrdwzkc3y25 2026-01-22 12:01:04+00:00| seen|...

K000159578: ImageMagick vulnerability CVE-2025-68618

Security Advisory Description ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue. CVE-2025-68618 Impact There is no impact; F...

Malicious code in legendevil1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3188a850ecb974606264f28634afaca67ec2f49c1c759cf590aa39ba19e50452 Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has...