1392 matches found
Processwire CMS <2.7.1 - Local File Inclusion
Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...
ROOT-OS-UBUNTU-2204-CVE-2025-39977 CVE-2025-39977 in linux - Patched by Root
Root has patched CVE-2025-39977 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2022-48976 CVE-2022-48976 in linux - Patched by Root
Root has patched CVE-2022-48976 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23417 CVE-2026-23417 in linux - Patched by Root
Root has patched CVE-2026-23417 in the linux package for Root:Debian:13. Multiple fixed versions available...
DEBIAN-CVE-2025-49506
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
ROOT-OS-UBUNTU-2404-CVE-2025-40141 CVE-2025-40141 in linux - Patched by Root
Root has patched CVE-2025-40141 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37767 CVE-2025-37767 in linux - Patched by Root
Root has patched CVE-2025-37767 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-58055 CVE-2024-58055 in linux - Patched by Root
Root has patched CVE-2024-58055 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31452 CVE-2026-31452 in linux - Patched by Root
Root has patched CVE-2026-31452 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38293 CVE-2025-38293 in linux - Patched by Root
Root has patched CVE-2025-38293 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in linux - Patched by Root
Root has patched CVE-2026-31655 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-50289 CVE-2024-50289 in linux - Patched by Root
Root has patched CVE-2024-50289 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-38300 CVE-2025-38300 in linux - Patched by Root
Root has patched CVE-2025-38300 in the linux package for Root:Debian:11. Multiple fixed versions available...
DEBIAN-CVE-2026-67290
FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...
DEBIAN-CVE-2026-53500
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...
CVE-2026-18022
Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...
CVE-2022-1227
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:43+00:00| seen| https://t.me/CVEhub/9651 2026-07-30 00:01:13+00:00| seen| https://t.me/CVEhub/9651 2026-07-31 10:00:05+00:00| published-proof-of-concept| https://t.me/CVEhub/9651 2026-08-01 00:00:34+00:00| published-proof-of-concept|...
BELL-CVE-2026-64385
Bulletin has no description...