MiracleLinux 4 : webkitgtk-1.2.6-2.AXS4 (AXSA:2011-34:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2011-34:01 advisory. WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. Security issues fixed with this release: CVE-2010-1780...

CVE-2026-21879

creationtimestamp| type| source ---|---|--- 2026-01-07 07:00:13+00:00| published-proof-of-concept| Telegram/48LJPPJqXsX53ujpRO7jSchQGpl7qMWyp3pQ0WH3nr5krXU 2026-01-08 02:34:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbuwzvhgjw2y...

GHSA-H78C-5CJX-JW6X

creationtimestamp| type| source ---|---|--- 2026-01-02 18:47:34+00:00| seen| Telegram/ApJ-QJ9lL1f0ZKW7BjjjKJ1R4V5b3d1wxuPvpjsu3iRxZ-U 2026-01-02 21:51:48+00:00| published-proof-of-concept| Telegram/OqvPk0TC77Z9DcsSU3c5lTkKTjblqJB8uZv-6Qb5bDB6CAw...

CVE-2025-68613

creationtimestamp| type| source ---|---|--- 2025-12-20 00:05:16+00:00| seen| https://infosec.exchange/users/offseq/statuses/115748969807044248 2025-12-20 00:05:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3maevthtqni2n 2025-12-22 09:44:34+00:00| seen|...

CVE-2025-68294

creationtimestamp| type| source ---|---|--- 2025-12-16 17:31:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115730434869931386 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-40190

creationtimestamp| type| source ---|---|--- 2025-12-11 10:34:08+00:00| seen| https://bsky.app/profile/secqube.com/post/3m7pero6l3r2k 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

EUVD-2025-200466

ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family...

CVE-2025-29864

creationtimestamp| type| source ---|---|--- 2025-12-03 12:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m73hrrlpun2k...

CVE-2025-65955

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick’s Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...

GHSA-G77Q-XRWW-P834

creationtimestamp| type| source ---|---|--- 2025-12-02 22:34:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115652353149773254...

编号撤回

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A resource management error vulnerability exists in ImageMagick versions prior to 7.1.2-9 and prior to 6.9.13-34, which stems from the reuse...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2025:4215-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4215-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.144 fixes various security issues The following security issues were fixed: ...

CVE-2025-13248

creationtimestamp| type| source ---|---|--- 2025-11-16 15:14:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5qys4tfvu2a...

EUVD-2025-141297

Malicious code in ira-34 npm...

Malicious code in ira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d12c359842dfac1a3d4fca3922ab0315b09b0bb686123da3bd0debf5b4b5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143520

Malicious code in alvino-34 npm...

EUVD-2025-140408

Malicious code in lia-34 npm...

EUVD-2025-141509

Malicious code in hokage-34 npm...

Malicious code in alvino-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a12f3e2cfa6cce55b46c1fc1bc28fc18f214a8d2cb59d7636986132f0891e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172783 Malicious code in alvino-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a12f3e2cfa6cce55b46c1fc1bc28fc18f214a8d2cb59d7636986132f0891e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...