MiracleLinux 7 : dnsmasq-2.76-16.el7.1 (AXSA:2021-1266:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1266:01 advisory. dnsmasq: loose address/port check in replyquery makes forging replies easier for an off-path attacker CVE-2020-25684 dnsmasq: loose query name check...

MiracleLinux 7 : samba-4.10.16-17.el7 (AXSA:2021-2787:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2787:06 advisory. samba: Active Directory AD domain user could become root on domain members CVE-2020-25717 samba: SMB1 client connections can be downgraded to...

MiracleLinux 7 : httpd24-httpd-2.4.34-22.el7.1 (AXSA:2021-2460:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2460:01 advisory. httpd: modproxy: SSRF via a crafted request uri-path containing unix: CVE-2021-40438 Tenable has extracted the preceding description block directly from the...

CVE-2025-12825: Missing Authorization

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...

WordPress plugin: User Registration Using Contact Form security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

MiracleLinux 7 : rh-postgresql95-postgresql-9.5.9-4.el7 (AXSA:2017-2468:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2468:03 advisory. Privilege escalation flaws were found in the initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use...

MiracleLinux 7 : spice-0.14.0-6.el7.1 (AXSA:2019-3720:03)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3720:03 advisory. spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 Tenable has extracted the preceding description block directly from the...

MiracleLinux 7 : libreoffice-4.3.7.2-5.el7.1 (AXSA:2015-935:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-935:01 advisory. LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor,...

MiracleLinux 7 : rh-postgresql94-postgresql-9.4.6-1.el7 (AXSA:2016-122:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-122:01 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to acce...

MiracleLinux 7 : gstreamer-plugins-good-0.10.31-12.el7 (AXSA:2017-1225:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1225:01 advisory. GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything fr...

MiracleLinux 7 : libvirt-4.5.0-10.el7.9 (AXSA:2019-3882:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3882:06 advisory. Security Fix - Microarchitectural Store Buffer Data Sampling MSBDS: Store Buffer CVE-2018-12126 - Microarchitectural Load Port Data Sampling MLDPDS:...

MiracleLinux 7 : rh-php56-php-5.6.5-8.el7 (AXSA:2016-140:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-140:02 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers...

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.141-2.6.10.0.0.1.el7.AXS7 (AXSA:2017-1653:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1653:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2017-3509 Vulnerability in the Java SE, Java SE Embedded component of...

MiracleLinux 7 : [security - medium] abrt and libreport (AXSA:2015-920:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-920:01 advisory. abrt abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. I...

MiracleLinux 7 : libvirt-4.5.0-23.el7 (AXSA:2019-4192:10)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4192:10 advisory. libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function CVE-2019-3840 Tenable has extracted the preceding...

MiracleLinux 7 : fribidi-1.0.2-1.el7.1 (AXSA:2019-4416:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4416:01 advisory. fribidi: buffer overflow in fribidigetparembeddinglevelsex in lib/fribidi-bidi.c leading to denial of service and possible code execution CVE-2019-18397...

MiracleLinux 7 : mariadb-5.5.47-1.el7 (AXSA:2016-198:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-198:01 advisory. MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server implementation...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000855)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000855 advisory. A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a...

MiracleLinux 7 : 389-ds-base-1.3.8.4-25.1.el7 (AXSA:2019-3946:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3946:02 advisory. 389-ds-base: DoS via hanging secured connections CVE-2019-3883 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : firefox-52.6.0-1.0.1.el7.AXS7 (AXSA:2018-2522:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-2522:01 advisory. Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...