CVE-2023-54389

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54388

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54387

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54386

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54385

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54384

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54383

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2023-54382

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54381

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54380

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54379

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54378

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54377

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54376

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

CVE-2023-54375

Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...

ROOT-OS-UBUNTU-2204-CVE-2025-39958 CVE-2025-39958 in linux - Patched by Root

Root has patched CVE-2025-39958 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

UBUNTU-CVE-2026-58180

The Apache Traffic Server txnbox plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

Code Generation Literal Injection in Kiota Ruby Generator Leads to Arbitrary Code Execution Impact The Kiota Ruby code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI default fields and property names directly into Ruby...

EUVD-2026-48439

A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...

LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges

Insufficient validation of byte array arguments in JNI-based XXHash implementations in lz4-java 1.11.0 and earlier allows callers to crash the JVM by passing an invalid array reference or invalid range to native XXHash methods. This affects applications where an attacker can influence the byte...