ROOT-OS-DEBIAN-13-CVE-2025-61729 CVE-2025-61729 in golang-1.24 - Patched by Root

Root has patched CVE-2025-61729 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56373 CVE-2026-56373 in imagemagick - Patched by Root

Root has patched CVE-2026-56373 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56366 CVE-2026-56366 in imagemagick - Patched by Root

Root has patched CVE-2026-56366 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61870 CVE-2026-61870 in imagemagick - Patched by Root

Root has patched CVE-2026-61870 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-12905 CVE-2024-12905 in tar-fs - Patched by Root

Root has patched CVE-2024-12905 in the tar-fs package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2019-9192 CVE-2019-9192 in glibc - Patched by Root

Root has patched CVE-2019-9192 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-53571 CVE-2026-53571 in vite - Patched by Root

Root has patched CVE-2026-53571 in the vite package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-34980 CVE-2026-34980 in cups - Patched by Root

Root has patched CVE-2026-34980 in the cups package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root

Root has patched CVE-2026-41080 in the expat package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56410 CVE-2026-56410 in expat - Patched by Root

Root has patched CVE-2026-56410 in the expat package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root

Root has patched CVE-2026-50219 in the expat package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56403 CVE-2026-56403 in expat - Patched by Root

Root has patched CVE-2026-56403 in the expat package for Root:Debian:13. Multiple fixed versions available...

Open Automation Software OAS Platform V16.00.0121 - Missing Authentication

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

Membership Database <= 1.0 - Cross-Site Scripting

Membership Database before 1.0 is susceptible to cross-site scripting via the tab parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker t...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

Microweber Information Disclosure

Microweber contains a vulnerability that allows exposure of sensitive information to an unauthorized actor in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0281 info: name: Microweber Information Disclosure author: pikpikcu severity: high description: Microweber contains a...

SysAid 20.4.74 - Cross-Site Scripting

SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter. id: CVE-2021-31862 info: name: SysAid 20.4.74 - Cross-Site Scripting author: jas37 severity: medium description: SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via...

Navidrome <=0.54.5 - Authentication Bypass in Subsonic API

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...