13754 matches found
ROOT-OS-ALPINE-322-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root
Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54276 CVE-2026-54276 in aiohttp - Patched by Root
Root has patched CVE-2026-54276 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69244 CVE-2026-69244 in aiohttp - Patched by Root
Root has patched CVE-2026-69244 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
Scoold < 1.64.0 - Authentication Bypass
Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...
ROOT-APP-NPM-CVE-2021-21353 CVE-2021-21353 in pug - Patched by Root
Root has patched CVE-2021-21353 in the pug package for Root:npm. Multiple fixed versions available...
chromedriver-151.0.7922.108-1.1 on GA media (moderate)
chromedriver-151.0.7922.108-1.1 on GA media Announcement ID: openSUSE-SU-2026:11484-1 Rating: moderate Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147...
ROOT-APP-MAVEN-CVE-2023-20860 CVE-2023-20860 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2023-20860 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
CVE-2026-68426
CVE-2026-68426 describes a Linux kernel issue in xfrm handling of GSO segments. When async crypto steals segments during validate_xmit_xfrm(), some segments are unlinked but the head skb->prev is not updated. If the last segment is stolen, validate_xmit_skb_list() may write through a stale poi...
CVE-2026-68417
Summary (concrete details): CVE-2026-68417 affects the Linux kernel RDMA/siw driver. The vulnerability stems from siw_create_qp() calling siw_qp_add() before QP state, queues, CQ pointers, completion, and device list entry are fully initialized. This allowed a QPN lookup to potentially reach a QP...
EUVD-2026-55561
In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...
CVE-2026-68279
The CVE-2026-68279 issue affects the Linux kernel DRM/DP MST path. Specifically, drm_dp_sideband_parse_remote_dpcd_read() and drm_dp_sideband_parse_remote_i2c_read_ack() read num_bytes from raw->msg and then memcpy(bytes, &raw->msg[idx], num_bytes) without validating that idx + num_bytes cu...
EUVD-2026-55376
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...
EUVD-2026-55341
In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drmgpusvmgetpages only stored the local dpagemap into svmpages-dpagemap on the success path. If a later page failed e.g. -EOPNOTSUPP when ctx-allowmixed is...
CVE-2026-68229
The CVE-2026-68229 entry covers a Linux kernel issue in the Cedrus H.264 driver. Cedrus would parse stateless H.264 ref_pic_list0/ref_pic_list1 entries and later index decode->dpb[] in _cedrus_write_ref_list(). A proposed fix guards the DPB lookup rather than rejecting the control path, becaus...
CVE-2026-68220
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2subdevcleanup in crossbar and pipe Both mxcisicrossbarinit and mxcisipipeinit call v4l2subdevinitfinalize which allocates the subdev active state, but neither mxcisicrossbarcleanup nor...
CVE-2026-68151
The CVE-2026-68151 entry concerns the Linux kernel FDPIC ELF binary format driver (binfmt_elf_fdpic). The flaw arises in how the program header scan handles PT_INTERP: the code may break out of the inner switch rather than the outer loop, causing binaries with more than one PT_INTERP to overwrite...
CVE-2026-68147
Summary (CVE-2026-68147) In the Linux kernel, the fscrypt subsystem fixed a dynamic allocation pitfall in fscrypt_get_devices(), which gathers the filesystem’s block-device list to apply config/start/evict calls. The vulnerability arose because the device pointers were stored in a dynamically all...
EUVD-2026-55481
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate numsubauth when copying ACE in setntacldacl setntacldacl copies each ACE from the attacker-controlled stored security descriptor verbatim into the response DACL without checking sid.numsubauth. The ACE bytes...