2891221 matches found
ROOT-OS-ALPINE-321-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root
Root has patched CVE-2026-8927 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root
Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root
Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
EUVD-2026-55244
GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member names are printed directly to output without quoting or escaping. An attacker can craft a cpio archive containing member names with...
CVE-2026-66484 Path Traversal in GNU cpio
GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the linktoname function without...
CVE-2026-71393 Heap Buffer Overflow in GNU Emacs for Android
GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...
CVE-2026-65942
TLS hostname verification issue in Apache Ranger Client Code in versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
Security Bulletin:Vulnerability in spring affects IBM Netezza Appliance
Summary The spring package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-41850, CVE-2026-41851, CVE-2026-41852 Vulnerability Details CVEID:CVE-2026-41850 DESCRIPTION: Applications that evaluate user-supplied Spring Expression Language SpEL...
EUVD-2026-55261
Cross-Site Request Forgery CSRF vulnerability in WP Umbrella allows Cross Site Request Forgery. This issue affects WP Umbrella: from 2.24.2 through 2.26.2...
CVE-2026-66642 WordPress WP Umbrella plugin 2.24.2-2.26.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in WP Umbrella allows Cross Site Request Forgery. This issue affects WP Umbrella: from 2.24.2 through 2.26.2...
CVE-2026-21079
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...
CVE-2026-21067
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-13133
creationtimestamp| type| source ---|---|--- 2026-08-10 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN40467227...
CVE-2026-66411
DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...
CVE-2026-66411
The CVE-2026-66411 entry concerns DEEBOT PRO M1 and DEEBOT PRO K1VAC, where the WebSocket authentication implementation is incorrect (CWE-303). An unauthenticated attacker may connect to and operate the affected robot. Documented impact includes potential unauthorized control of the device, with ...
CVE-2026-66409
DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...
ROOT-APP-NPM-CVE-2026-59892 CVE-2026-59892 in @opentelemetry/propagator-jaeger - Patched by Root
Root has patched CVE-2026-59892 in the @opentelemetry/propagator-jaeger package for Root:npm. Multiple fixed versions available...
CVE-2026-66404
The CVE-2026-66404 issue affects DEEBOT PRO M1 and DEEBOT PRO K1VAC where the MQTT client does not validate server certificates, enabling potential unauthorized access to operation and activity logs stored on the device. The vulnerability is categorized as missing server certificate verification ...