MiracleLinux 9 : python-pip-21.2.3-7.el9 (AXSA:2023-6874:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6874:01 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 3 : e2fsprogs-1.39-10.1.1AXS3 (AXBA:2008-317:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2008-317:03 advisory. - Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem...

MiracleLinux 3 : e2fsprogs-1.39-10.1.1AXS3 (AXBA:2008-123:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2008-123:01 advisory. - Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem...

MiracleLinux 3 : mcstrans-0.2.7-1AXS3 (AXBA:2008-181:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXBA:2008-181:01 advisory. - Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service temporary daemon outage...

MiracleLinux 3 : kernel-2.6.18-53.14AXS3 (AXSA:2008-519:09)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-519:09 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Bugs fixed: CVE-2007-6417: The shmemgetpage function mm/shmem.c...

MiracleLinux 4 : qemu-kvm-0.12.1.2-2.355.AXS4.5 (AXSA:2013-473:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-473:03 advisory. KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running...

MiracleLinux 3 : tcl-8.4.13-6.AXS3 (AXSA:2013-11:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-11:01 advisory. The Tcl Tool Command Language provides a powerful platform for creating integration applications that tie together diverse applications, protocols,...

MiracleLinux 3 : lftp-3.7.11-4AXS3 (AXSA:2009-390:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-390:01 advisory. LFTP is a sophisticated ftp/http file transfer program. Like bash, it has job control and uses the readline library for input. It has bookmarks, built-in...

MiracleLinux 3 : cpio-2.6-23.AXS3.1 (AXSA:2010-146:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2010-146:01 advisory. GNU cpio copies files into or out of a cpio or tar archive. Archives are files which contain a collection of other files plus information about them,...

MiracleLinux 3 : tar-1.15.1-23.0.1.AXS3.2 (AXSA:2010-148:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2010-148:01 advisory. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be...

MiracleLinux 3 : kernel-2.6.18-128.14.AXS3 (AXSA:2010-141:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-141:01 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

MiracleLinux 3 : krb5-1.5-29 (AXSA:2007-01:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2007-01:01 advisory. Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of...

MiracleLinux 3 : netpbm-10.35-6.1AXS3.1 (AXSA:2009-24:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-24:01 advisory. The netpbm package contains a library of functions which support programs for handling various graphics file formats, including .pbm portable bitmaps,...

MiracleLinux 7 : python3-3.6.8-21.0.4.el7.AXS7 (AXSA:2025-11000:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11000:05 advisory. CVE-2007-4559: implement PEP 706 a filter in the tarfile module to prevent directory traversal vulnerability CVEs: CVE-2007-4559 Directory traversal...

CVE-2007-2764 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-vmware...

CVE-2007-4635

Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service application crash via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the provenance of this...

CVE-2007-4006

Buffer overflow in Mike Dubman Windows RSH daemon rshd 1.7 has unknown impact and remote attack vectors, aka ZD-00000034. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories....

CVE-2007-4233

Multiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers to cause a denial of service via unknown vectors...

CVE-2007-4309

IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by setting the notes.ini 1 KFMShowEntropy and 2 DebugOutfile debug variables, a different vulnerability than CVE-2005-2696...

CVE-2007-4548

The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with...