284827 matches found
ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
CVE-2025-32463
La versión 1.9.17 de Sudo tiene una vulnerabilidad crítica CVE-2025-32463 que permite a usuarios locales obtener acceso root explotando la opción chroot, lo que puede conllevar graves riesgos de seguridad. Se recomienda a los usuarios actualizar a la versión 1.9.17p1 o posterior para mitigar este...
CLSA-2026-1790851862 TuxCare security update for sentence-transformers (1 CVE)
TuxCare rebuilt sentence-transformers to address 1 CVE. Fixed in 2.7.0.post3+tuxcare...
ROOT-APP-NPM-CVE-2026-46490 CVE-2026-46490 in samlify - Patched by Root
Root has patched CVE-2026-46490 in the samlify package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-10050 CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root
Root has patched CVE-2026-10050 in the org.eclipse.jetty:jetty-security package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-AIKIDO-2026-61483 AIKIDO-2026-61483 in org.springframework.security:spring-security-oauth2-jose - Patched by Root
Root has patched AIKIDO-2026-61483 in the org.springframework.security:spring-security-oauth2-jose package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1790850263 TuxCare security update for 10 packages (1 CVE)
TuxCare rebuilt 10 packages to address 1 CVE. Fixed in 15.1.2-tuxcare.1...
CVE-2022-1592
CVE-2022-1592 PoC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...
ROOT-APP-MAVEN-CVE-2026-22739 CVE-2026-22739 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-22739 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41002 CVE-2026-41002 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-41002 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40981 CVE-2026-40981 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-40981 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
Public_Exploit-1--Wordpress-CVE-2021-29447
PublicExploit-1--Wordpress-CVE-2021-29447 CVE-2021-29447 is an authenticated XML External Entity XXE vulnerability in WordPress The vulnerability exists in the WordPress Media Library when WordPress is running on PHP 8 and the user has permission to upload media files. A specially crafted .wav fi...
ROOT-APP-MAVEN-CVE-2026-59901 CVE-2026-59901 in io.netty:netty-codec - Patched by Root
Root has patched CVE-2026-59901 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-44249 CVE-2026-44249 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-44249 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
BIT-PHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
BIT-LIBPHP-2026-91765 SOAP: Unbounded Recursion in Server-Side cleanup_xml_node
cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...
BIT-DOTNET-SDK-2026-69806 .NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
BIT-DOTNET-2026-69806 .NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...