cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

ROOT-OS-UBUNTU-2404-CVE-2025-37767 CVE-2025-37767 in linux - Patched by Root

Root has patched CVE-2025-37767 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-40141 CVE-2025-40141 in linux - Patched by Root

Root has patched CVE-2025-40141 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31452 CVE-2026-31452 in linux - Patched by Root

Root has patched CVE-2026-31452 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2024-58055 CVE-2024-58055 in linux - Patched by Root

Root has patched CVE-2024-58055 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-39977 CVE-2025-39977 in linux - Patched by Root

Root has patched CVE-2025-39977 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-48976 CVE-2022-48976 in linux - Patched by Root

Root has patched CVE-2022-48976 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

ROOT-OS-DEBIAN-13-CVE-2026-23417 CVE-2026-23417 in linux - Patched by Root

Root has patched CVE-2026-23417 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in linux - Patched by Root

Root has patched CVE-2026-31655 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38293 CVE-2025-38293 in linux - Patched by Root

Root has patched CVE-2025-38293 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-50289 CVE-2024-50289 in linux - Patched by Root

Root has patched CVE-2024-50289 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38300 CVE-2025-38300 in linux - Patched by Root

Root has patched CVE-2025-38300 in the linux package for Root:Debian:11. Multiple fixed versions available...

DEBIAN-CVE-2025-49506

APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...

CLSA-2026-1774830286 TuxCare security update for picocolors (2 CVEs)

TuxCare rebuilt picocolors to address 2 CVEs. Fixed in 0.2.1-tuxcare.1...

CLSA-2026-1774398061 TuxCare security update for mime (3 CVEs)

TuxCare rebuilt mime to address 3 CVEs. Fixed in 1.3.0-tuxcare.1...

DEBIAN-CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

DEBIAN-CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...

CVE-2026-18022

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

CVE-2022-1227

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:43+00:00| seen| https://t.me/CVEhub/9651 2026-07-30 00:01:13+00:00| seen| https://t.me/CVEhub/9651 2026-07-31 10:00:05+00:00| published-proof-of-concept| https://t.me/CVEhub/9651 2026-08-01 00:00:34+00:00| published-proof-of-concept|...