260149 matches found
USN-8576-2 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
CVE-2024-58023
Technical details are not publicly available in the provided documents. Monitor Bosch security advisories for updates on CVE-2024-58023.
EUVD-2026-47887
The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...
CVE-2026-63226
CVE-2026-63226 affects Ricoh Printers and MFPs. The issue is lack of restrictions on SSH port forwarding, enabling SSH port forwarding to reach arbitrary destinations on the LAN when SSH is enabled on the affected product. The connected documents provide the vulnerability description and CVSS met...
CVE-2026-7120
@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Versions up to and including 10.1.1 are affected. An unauthenticated attacker can bypass allowedPath restrictions by requesting equivalent...
openjdk: Enhance TLS certificate handling
Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allow...
Progress Kemp Flowmon - Command Injection
In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands. id: CVE-2024-2389 info: nam...
Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...
WordPress File Upload <= 4.24.11 - Arbitrary File Read
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitatio...
ROOT-OS-DEBIAN-12-CVE-2026-23318 CVE-2026-23318 in rootio-linux - Patched by Root
Root has patched CVE-2026-23318 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23169 CVE-2026-23169 in rootio-linux - Patched by Root
Root has patched CVE-2026-23169 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23066 CVE-2026-23066 in rootio-linux - Patched by Root
Root has patched CVE-2026-23066 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23277 CVE-2026-23277 in rootio-linux - Patched by Root
Root has patched CVE-2026-23277 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38659 CVE-2025-38659 in rootio-linux - Patched by Root
Root has patched CVE-2025-38659 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-68206 CVE-2025-68206 in rootio-linux - Patched by Root
Root has patched CVE-2025-68206 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-53062 CVE-2026-53062 in rootio-linux - Patched by Root
Root has patched CVE-2026-53062 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38422 CVE-2025-38422 in rootio-linux - Patched by Root
Root has patched CVE-2025-38422 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-25740 CVE-2024-25740 in rootio-linux - Patched by Root
Root has patched CVE-2024-25740 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...