DEBIAN-CVE-2025-40906

BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities. Those include CVE-2017-14227, CVE-2018-16790, CVE-2023-0437, CVE-2024-6381, CVE-2024-6383, and CVE-2025-0755. BSON-XS was the official Perl XS implementation of MongoDB's BSON...

CVE-2017-11551 affecting package libid3tag for versions less than 0.16.3-7

CVE-2017-11551 affecting package libid3tag for versions less than 0.16.3-7. An upgraded version of the package is available that resolves this issue...

CVE-2017-5974 affecting package zziplib for versions less than 0.13.74-1

CVE-2017-5974 affecting package zziplib for versions less than 0.13.74-1. An upgraded version of the package is available that resolves this issue...

CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1

CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2017-11550 affecting package libid3tag for versions less than 0.16.3-7

CVE-2017-11550 affecting package libid3tag for versions less than 0.16.3-7. An upgraded version of the package is available that resolves this issue...

CVE-2017-18342

creationtimestamp| type| source ---|---|--- 2025-05-14 21:31:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lp5x4lp2l42x 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901 2026-04-02 17:00:00+00:00| seen|...

CVE-2017-0045

creationtimestamp| type| source ---|---|--- 2025-05-14 11:38:03+00:00| seen| https://t.me/CyberBulletin/3263...

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2017, and Acrobat Reader 2017 lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2017, and Acrobat Reader 2017 is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Alibaba Cloud Linux 3 : 0269: PyYAML (ALINUX3-SA-2024:0269)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0269 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2017-18342: In PyYAML before 5.1, the...

Alibaba Cloud Linux 3 : 0084: libvncserver (ALINUX3-SA-2021:0084)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0084 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2017-18922: It was discovered that websockets.c...

Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. An attacker cou...

AlmaLinux 8 : libtiff (ALSA-2025:4658)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:4658 advisory. libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service CVE-2017-17095 Tenable has extracted the preceding description block directly...

RHEL 8 : libtiff (RHSA-2025:4658)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4658 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Heap-based buffer...

Oracle Linux 8 : libtiff (ELSA-2025-4658)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4658 advisory. 4.0.9-34 - fix CVE-2017-17095: heap-based buffer overflow in pal2rgb RHEL-87363 Tenable has extracted the preceding description block directly from the Oracle...

CVE-2017-14429

creationtimestamp| type| source ---|---|--- 2025-05-06 15:21:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15141...

CVE-2017-6511

creationtimestamp| type| source ---|---|--- 2025-05-05 19:20:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14976...

CVE-2017-7740

creationtimestamp| type| source ---|---|--- 2025-04-29 03:14:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13753 2025-04-29 06:47:59+00:00| seen| https://t.me/cvedetector/23978...

Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs

Summary Cloud Pak for Security CP4S v1.8.1.0 and earlier uses packages that are vulnerable to several CVEs. These have been remediated in the latest product release. Please see below for CVE details and the Remediation section for upgrade instructions. Vulnerability Details CVEID:CVE-2015-8985...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics

Summary IBM® DB2® is shipped as a component of IBM PureData System for Operational Analytics. Information about security vulnerabilities affecting IBM DB2 have been published in a security bulletin. Vulnerability Details CVEID:CVE-2017-12973 DESCRIPTION: Connect2id Nimbus JOSE+JWT could provide...

RHEL 6 / 7 : devtoolset-4-jackson-databind (RHSA-2017:1840)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1840 advisory. The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security...