CVE-2026-6475

A flaw was found in PostgreSQL. This vulnerability, related to symlink following in pgbasebackup plain format and pgrewind, allows an origin superuser to overwrite local files. By exploiting this, an attacker could potentially hijack the operating system account. This attack has practical...

CVE-2026-45702

OP-TEE OS contains a type confusion in the SPMC tmem path when processing an FFA_MEM_SHARE request, affecting 4.3.0 through prior to 4.11.0 for systems configured with CFG_CORE_SEL1_SPMC=y and CFG_SECURE_PARTITION=y. This can impact availability (kernel/OP-TEE stability) with no reported confiden...

ROOT-OS-UBUNTU-2404-CVE-2025-40104 CVE-2025-40104 in rootio-linux - Patched by Root

Root has patched CVE-2025-40104 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38730 CVE-2025-38730 in rootio-linux - Patched by Root

Root has patched CVE-2025-38730 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38073 CVE-2025-38073 in rootio-linux - Patched by Root

Root has patched CVE-2025-38073 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43227 CVE-2026-43227 in rootio-linux - Patched by Root

Root has patched CVE-2026-43227 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31408 CVE-2026-31408 in rootio-linux - Patched by Root

Root has patched CVE-2026-31408 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-22038 CVE-2025-22038 in rootio-linux - Patched by Root

Root has patched CVE-2025-22038 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21782 CVE-2025-21782 in rootio-linux - Patched by Root

Root has patched CVE-2025-21782 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43456 CVE-2026-43456 in rootio-linux - Patched by Root

Root has patched CVE-2026-43456 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-68799 CVE-2025-68799 in rootio-linux - Patched by Root

Root has patched CVE-2025-68799 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43497 CVE-2026-43497 in rootio-linux - Patched by Root

Root has patched CVE-2026-43497 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43187 CVE-2026-43187 in rootio-linux - Patched by Root

Root has patched CVE-2026-43187 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31605 CVE-2026-31605 in rootio-linux - Patched by Root

Root has patched CVE-2026-31605 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-68173 CVE-2025-68173 in rootio-linux - Patched by Root

Root has patched CVE-2025-68173 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-40347 CVE-2025-40347 in rootio-linux - Patched by Root

Root has patched CVE-2025-40347 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-39732 CVE-2025-39732 in rootio-linux - Patched by Root

Root has patched CVE-2025-39732 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-68729 CVE-2025-68729 in rootio-linux - Patched by Root

Root has patched CVE-2025-68729 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

sar2html <=3.2.2 Plot Parameter - Remote Code Execution

sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...