MiracleLinux 9 : httpd-2.4.57-5.el9 (AXSA:2023-6899:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6899:07 advisory. httpd: modproxyuwsgi HTTP response splitting CVE-2023-27522 CVE-2023-27522 HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. Thi...

CVE-2026-22850

creationtimestamp| type| source ---|---|--- 2026-01-19 17:25:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcs5xxwxfh2w 2026-01-19 18:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcs7xpgrkx27 2026-01-19 18:51:51+00:00| seen|...

BELL-CVE-2025-68793

Bulletin has no description...

BELL-CVE-2026-0988

Bulletin has no description...

CVE-2021-47803

creationtimestamp| type| source ---|---|--- 2026-01-16 01:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcixdqlqfj2q...

MiracleLinux 7 : rh-php56-php-5.6.5-9.el7 (AXSA:2016-623:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-623:03 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in...

MiracleLinux 4 : bind-9.8.2-0.47.3.0.1.rc1.AXS4 (AXSA:2016-718:05)

"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-718:05 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names ...

BELL-CVE-2025-71125

Bulletin has no description...

DEBIAN-CVE-2026-22859

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSBINTERFACEDESCRIPTOR values and uses them as indices in libusbudevcompletemsconfigsetup, causing an out‑of‑bounds read. This vulnerability is...

DEBIAN-CVE-2026-22851

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl-primary SDLSurface is accessed after it has been...

DEBIAN-CVE-2025-71111

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...

DEBIAN-CVE-2025-71108

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect numconnectors capability The UCSI spec states that the numconnectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it...

CVE-2025-14613

creationtimestamp| type| source ---|---|--- 2026-01-14 07:31:35+00:00| seen| https://gist.github.com/Darkcrai86/ad244cc38e39683c77cf9eb62690d6b2 2026-01-14 08:04:03+00:00| seen| https://gist.github.com/Darkcrai86/9134b77f1396f4f1a020347dab3916da...

CVE-2023-54340

creationtimestamp| type| source ---|---|--- 2026-01-14 01:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdxhxbz4722...

CVE-2025-38132 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

MiracleLinux 4 : bind-9.7.3-2.2.0.1.AXS4.P3 (AXSA:2011-406:01)

"The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-406:01 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves ho...

MiracleLinux 3 : systemtap-0.7.2-3.2AXS3 (AXSA:2009-314:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-314:01 advisory. SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system. Fix...

MiracleLinux 4 : busybox-1.15.1-15.AXS4 (AXSA:2012-587:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-587:01 advisory. Busybox is a single binary which includes versions of a large number of system commands, including a shell. This package can be very useful for...

CVE-2026-20823

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

DEBIAN-CVE-2026-0880

Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...