CVE-2026-46739

CVE-2026-46739 affects Net::Statsd for Perl, versions before 0.13. Root cause: metric names aren’t checked for newlines, colons, or pipes; and the update_stats and gauge methods don’t validate numeric values, allowing metric injection of additional statsd metrics. Impact: potential injection of m...

CVE-2026-36748

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting XSS via Social Media links in user profile...

CVE-2026-34077

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

CVE-2025-64390

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J Blu-ray Disc Java sandbox can be escaped through a malformed JAR file...

CVE-2025-64390

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J Blu-ray Disc Java sandbox can be escaped through a malformed JAR file...

CVE-2025-64390

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J Blu-ray Disc Java sandbox can be escaped through a malformed JAR file...

EUVD-2025-210043

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J Blu-ray Disc Java sandbox can be escaped through a malformed JAR file...

CVE-2026-34077

React Router upstream vulnerability CVE-2026-34077 affects versions 7.7.0–7.13.1 where, when using unstable React Server Components APIs, the RSC redirect handling can lead to a client-side XSS if redirects come from untrusted sources. The issue does not impact non-RSC applications. A fix is avai...

CVE-2026-33244

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in the statically generated HTML files if the redirect location comes from an...

CVE-2026-33244 React Router has stored XSS via unescaped Location header in prerendered redirect HTML

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in the statically generated HTML files if the redirect location comes from an...

ROOT-OS-DEBIAN-13-CVE-2026-8376 CVE-2026-8376 in rootio-perl - Patched by Root

Root has patched CVE-2026-8376 in the rootio-perl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-9538 CVE-2026-9538 in rootio-perl - Patched by Root

Root has patched CVE-2026-9538 in the rootio-perl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-42497 CVE-2026-42497 in rootio-perl - Patched by Root

Root has patched CVE-2026-42497 in the rootio-perl package for Root:Debian:13. Multiple fixed versions available...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

ROOT-OS-DEBIAN-13-CVE-2026-23037 CVE-2026-23037 in rootio-linux - Patched by Root

Root has patched CVE-2026-23037 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23178 CVE-2026-23178 in rootio-linux - Patched by Root

Root has patched CVE-2026-23178 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31667 CVE-2026-31667 in rootio-linux - Patched by Root

Root has patched CVE-2026-31667 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23307 CVE-2026-23307 in rootio-linux - Patched by Root

Root has patched CVE-2026-23307 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40323 CVE-2025-40323 in rootio-linux - Patched by Root

Root has patched CVE-2025-40323 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-71223 CVE-2025-71223 in rootio-linux - Patched by Root

Root has patched CVE-2025-71223 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...