2570 matches found
MiracleLinux 4 : bind-9.8.2-0.47.3.0.1.rc1.AXS4 (AXSA:2016-718:05)
"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-718:05 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names ...
BELL-CVE-2025-71125
Bulletin has no description...
DEBIAN-CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSBINTERFACEDESCRIPTOR values and uses them as indices in libusbudevcompletemsconfigsetup, causing an out‑of‑bounds read. This vulnerability is...
DEBIAN-CVE-2026-22851
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl-primary SDLSurface is accessed after it has been...
DEBIAN-CVE-2025-71111
In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Convert macros to functions to avoid TOCTOU The macro FANFROMREG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use TOCTO...
DEBIAN-CVE-2025-71108
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect numconnectors capability The UCSI spec states that the numconnectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it...
CVE-2025-14613
creationtimestamp| type| source ---|---|--- 2026-01-14 07:31:35+00:00| seen| https://gist.github.com/Darkcrai86/ad244cc38e39683c77cf9eb62690d6b2 2026-01-14 08:04:03+00:00| seen| https://gist.github.com/Darkcrai86/9134b77f1396f4f1a020347dab3916da...
CVE-2023-54340
creationtimestamp| type| source ---|---|--- 2026-01-14 01:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdxhxbz4722...
CVE-2025-38132 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-vmware, linux-gcp, linux-azure...
MiracleLinux 4 : bind-9.7.3-2.2.0.1.AXS4.P3 (AXSA:2011-406:01)
"The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-406:01 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves ho...
MiracleLinux 3 : systemtap-0.7.2-3.2AXS3 (AXSA:2009-314:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-314:01 advisory. SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system. Fix...
MiracleLinux 4 : busybox-1.15.1-15.AXS4 (AXSA:2012-587:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-587:01 advisory. Busybox is a single binary which includes versions of a large number of system commands, including a shell. This package can be very useful for...
CVE-2026-20823
creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...
DEBIAN-CVE-2026-0880
Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
DEBIAN-CVE-2026-0879
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
DEBIAN-CVE-2025-56225
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...
UBUNTU-CVE-2025-67859
Unknown description...
BELL-CVE-2023-54180
Bulletin has no description...