MiracleLinux 7 : libxml2-2.9.1-6.6.0.4.el7.AXS7 (AXSA:2025-10716:14)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10716:14 advisory. CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements CVE-2025-49796: fix memory corruption issue...

CVE-2025-68921

creationtimestamp| type| source ---|---|--- 2026-01-12 11:00:10+00:00| published-proof-of-concept| Telegram/ZOaPQk2qo1kF67xB9c1w3FBXAiam7yoFojTfVMOk9SwVLE 2026-01-12 15:00:08+00:00| published-proof-of-concept| Telegram/CGx8SegN-49RVeuavtq3Jo8Ts2xr-V3iQ0C2UE4RTzZzg8 2026-01-14 03:50:47+00:00| seen...

CVE-2025-59814

creationtimestamp| type| source ---|---|--- 2026-01-09 14:14:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115865555268914985...

CVE-2023-40396

The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40406

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14. An app may be able to read arbitrary files...

CVE-2023-40411

This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40393

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2023-40528

This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6.4. An app may be able to bypass Privacy preferences...

CVE-2023-40384

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read sensitive location information...

CVE-2023-40450

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2016-2357

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...

CVE-2025-31643

creationtimestamp| type| source ---|---|--- 2026-01-07 14:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbtnq7t27e2c 2026-01-07 17:51:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtzt233we2a 2026-01-07 17:52:52+00:00| seen|...

CVE-2025-14121

creationtimestamp| type| source ---|---|--- 2026-01-07 11:14:32+00:00| seen| https://gist.github.com/Darkcrai86/1ac9719381f457cf09c1ed43f7e20f0e...

RockyLinux 9 : gcc-toolset-14-binutils (RLSA-2026:0052)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0052 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the RockyLinux security...

CVE-2025-69417

creationtimestamp| type| source ---|---|--- 2026-01-02 18:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbhk2oxsgd2q...

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

CVE-2025-14500

IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling o...

CVE-2025-68738

creationtimestamp| type| source ---|---|--- 2025-12-24 14:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maqj4jgmxx2e 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-68469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14, ImageMagick crashes when processing a...