Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

DEBIAN-CVE-2026-45075

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, method-scoped IsGranted, IsSignatureValid, and IsCsrfTokenValid attributes can be configured for GET only, but Symfony routes HEAD requests to the GET handler while the...

CVE-2026-50378

CVE-2026-50378 is a Windows Key Guard elevation-of-privilege vulnerability caused by a race condition in a shared resource that allows a local attacker to elevate privileges. The connected sources confirm the issue and that Microsoft released updates (e.g., KB5101649 and MSRC advisories) to addre...

ROOT-OS-UBUNTU-2404-CVE-2025-37767 CVE-2025-37767 in rootio-linux - Patched by Root

Root has patched CVE-2025-37767 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2024-58055 CVE-2024-58055 in rootio-linux - Patched by Root

Root has patched CVE-2024-58055 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31452 CVE-2026-31452 in rootio-linux - Patched by Root

Root has patched CVE-2026-31452 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-39977 CVE-2025-39977 in rootio-linux - Patched by Root

Root has patched CVE-2025-39977 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-48976 CVE-2022-48976 in rootio-linux - Patched by Root

Root has patched CVE-2022-48976 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23417 CVE-2026-23417 in rootio-linux - Patched by Root

Root has patched CVE-2026-23417 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38300 CVE-2025-38300 in rootio-linux - Patched by Root

Root has patched CVE-2025-38300 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-50289 CVE-2024-50289 in rootio-linux - Patched by Root

Root has patched CVE-2024-50289 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38293 CVE-2025-38293 in rootio-linux - Patched by Root

Root has patched CVE-2025-38293 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

DEBIAN-CVE-2026-56000

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent pointing into potentially reallocated memory...

DEBIAN-CVE-2026-45093

Bulletin has no description...

BELL-CVE-2026-53332

Bulletin has no description...

This Week in Spring - June 30th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring , a weekly recap in which we review the latest and greatest in the wide and wonderful world of Spring. You probably already knew this. I don't know if I needed to mention it. But I like to. I've been doing this every week,...

BELL-CVE-2026-8932

Bulletin has no description...

BELL-CVE-2026-52953

Bulletin has no description...

DEBIAN-CVE-2026-57456

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim executes reconstructed function and class definitions from the current buffer with exec as part of populating the completion...

DEBIAN-CVE-2026-53217

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dmaaddr + MVPP2SKBHEADROOM. The current CPU sync starts at dmaaddr and only covers rxbytes +...