Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

ROOT-OS-DEBIAN-13-CVE-2026-23417 CVE-2026-23417 in rootio-linux - Patched by Root

Root has patched CVE-2026-23417 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-50289 CVE-2024-50289 in rootio-linux - Patched by Root

Root has patched CVE-2024-50289 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38293 CVE-2025-38293 in rootio-linux - Patched by Root

Root has patched CVE-2025-38293 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in rootio-linux - Patched by Root

Root has patched CVE-2026-31655 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38300 CVE-2025-38300 in rootio-linux - Patched by Root

Root has patched CVE-2025-38300 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31452 CVE-2026-31452 in rootio-linux - Patched by Root

Root has patched CVE-2026-31452 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-40141 CVE-2025-40141 in rootio-linux - Patched by Root

Root has patched CVE-2025-40141 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-37767 CVE-2025-37767 in rootio-linux - Patched by Root

Root has patched CVE-2025-37767 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2024-58055 CVE-2024-58055 in rootio-linux - Patched by Root

Root has patched CVE-2024-58055 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-48976 CVE-2022-48976 in rootio-linux - Patched by Root

Root has patched CVE-2022-48976 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-39977 CVE-2025-39977 in rootio-linux - Patched by Root

Root has patched CVE-2025-39977 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

This Week in Spring - June 30th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring , a weekly recap in which we review the latest and greatest in the wide and wonderful world of Spring. You probably already knew this. I don't know if I needed to mention it. But I like to. I've been doing this every week,...

BELL-CVE-2026-52953

Bulletin has no description...

BELL-CVE-2026-52919

Bulletin has no description...

DEBIAN-CVE-2026-57456

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim executes reconstructed function and class definitions from the current buffer with exec as part of populating the completion...

DEBIAN-CVE-2026-53217

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dmaaddr + MVPP2SKBHEADROOM. The current CPU sync starts at dmaaddr and only covers rxbytes +...

DEBIAN-CVE-2026-56208

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing LAP mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when glaginframes is set to 1 or higher. This results in a 232-byte...

DEBIAN-CVE-2026-12308

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

DEBIAN-CVE-2025-55660

A stack overflow in the gfopusreadlength function mediatools/avparsers.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...