ROOT-OS-UBUNTU-2404-CVE-2026-31531 CVE-2026-31531 in rootio-linux - Patched by Root

Root has patched CVE-2026-31531 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-31531 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-azure, linux-aws, linux-vmware, linux-gcp...

UBUNTU-CVE-2026-31531

In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtmgetnexthop When querying a nexthop object via RTMGETNEXTHOP, the kernel currently allocates a fixed-size skb using NLMSGGOODSIZE. While sufficient for single nexthops and small...

CVE-2026-31531

The vulnerability CVE-2026-31531 affects the Linux kernel’s nexthop handling in IPv4 when querying large nexthop groups via RTM_GETNEXTHOP. The fixed issue was a fixed-size NLMSG buffer (NLMSG_GOODSIZE) that could overflow for large groups (e.g., 512 nexthops), causing kernel warnings and potenti...

CVE-2022-31531

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2025-31531

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:28+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtldhqau2o 2025-04-01 23:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379083150582 2025-04-01 23:48:39+00:00| seen|...

CVE-2025-31531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in click5 History Log by click5 history-log-by-click5 allows SQL Injection.This issue affects History Log by click5: from n/a through = 1.0.13...

WordPress History Log by click5 plugin <= 1.0.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin History Log by click5 versions = 1.0.13...

CVE-2023-31531

creationtimestamp| type| source ---|---|--- 2023-05-12 02:26:45+00:00| seen| https://t.me/cibsecurity/63948...

CVE-2023-31531

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter...

CVE-2023-31531

CVE-2023-31531 affects Motorola CX2L Router 1.0.1. The vulnerability is a command injection through the tomography_ping_number parameter, leading to high-severity impact on confidentiality, integrity, and availability. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, with a base score ...

CVE-2023-31531

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter...

CVE-2023-31531

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter...

CVE-2022-31531

The CVE-2022-31531 entry concerns the dainst/cilantro repository (GitHub) up to version 0.0.4. Root cause is unsafe use of Flask’s send_file, enabling absolute path traversal. Impacts are noted as partial confidentiality and partial availability (per CVSS), with no explicit exploitation details o...

InHand Networks InRouter 900 Industrial 4G Router命令注入漏洞（CNVD-2022-31531）

The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, U.S.A. A security vulnerability exists in the InHand Networks InRouter 900 Industrial 4G Router, and no details of the vulnerability are currently available...

CVE-2021-31531

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-31531

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-31531

Zoho ManageEngine ServiceDesk Plus MSP prior to version 10521 is affected by a Server-Side Request Forgery (SSRF) vulnerability. The issue is confirmed in multiple sources (including Red Hat and NVD records) with a CVSS v3.1 base score of 9.8 (CRITICAL) and CVSS v2 of 7.5 (HIGH). The vulnerabilit...