ROOT-OS-UBUNTU-2404-CVE-2025-21707 CVE-2025-21707 in linux - Patched by Root

Root has patched CVE-2025-21707 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

Siemens SIMATIC S7-1500 CPU 1518 MFP Use of Uninitialized Resource (CVE-2025-21707)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505756; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

MiracleLinux 7 : rh-php73-php-7.3.33-1.el7 (AXSA:2022-3369:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3369:01 advisory. php: password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 php: Local privilege escalation via PHP-FPM CVE-2021-21703...

MiracleLinux 8 : php:7.4 (AXSA:2022-4415:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4415:01 advisory. php: Special character breaks path in xml parsing CVE-2021-21707 php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 php-pear:...

Linux Distros Unpatched Vulnerability : CVE-2021-21707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename...

CVE-2022-21707

wasmCloud Host Runtime is a server process that securely hosts and provides dispatch for web assembly WASM actors and capability providers. In versions prior to 0.52.2 actors can bypass capability authorization. Actors are normally required to declare their capabilities for inbound invocations, b...

CVE-2025-21707 affecting package kernel for versions less than 5.15.179.1-1

CVE-2025-21707 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...

CVE-2025-21707 affecting package kernel for versions less than 6.6.78.1-3

CVE-2025-21707 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21707

creationtimestamp| type| source ---|---|--- 2025-02-27 04:31:10+00:00| seen| https://t.me/cvedetector/18996 2025-03-08 04:34:56+00:00| seen| Telegram/LHR8B6Y55dCSkjhgY9kiSioWECqO5VxKdzmOSKltoXnzKEa 2026-07-28 16:17:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

DEBIAN-CVE-2025-21707

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...

CVE-2025-21707

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...

CVE-2021-21707 affecting package php 7.4.14-3

CVE-2021-21707 affecting package php 7.4.14-3. This CVE either no longer is or was never applicable...

BELL-CVE-2021-21707 CVE-2021-21707 does not affect BellSoft software

Bulletin has no description...

CVE-2023-21707

creationtimestamp| type| source ---|---|--- 2023-02-22 03:33:02+00:00| seen| https://t.me/realvulnerabilities/6 2023-04-28 10:57:54+00:00| published-proof-of-concept| https://t.me/ptswarm/171 2023-04-28 13:05:15+00:00| published-proof-of-concept| https://t.me/roadtooscp/199 2023-04-28...

Update now! February's Patch Tuesday tackles three zero-days

The Patch Tuesday roundup from Microsoft for February 2023 includes three zero-days. Not exactly what we had in mind for Valentine's Day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix available. As far as we can tell, onl...

CVE-2023-21707 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-21707 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2023-21707

CVE-2023-21707 is a Microsoft Exchange Server remote code execution vulnerability, observed among a set of Exchange RCE flaws fixed in the February 14, 2023 update (KB5023038). The cited update confirms that three Exchange RCE flaws—CVE-2023-21529, CVE-2023-21706, CVE-2023-21707, and CVE-2023-217...

KLA20232 Multiple vulnerabilities in Microsoft Server Software

Remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2023-21707 CVE-2023-21710 CVE-2023-21529 CVE-2023-21706 Exploitation Public exploits exist for this vulnerability...

Security Updates for Microsoft Exchange Server (February 2023)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Feb, 2023 security bulletin. - Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-21529, CVE-2023-21706,...