ROOT-OS-ALPINE-321-CVE-2026-3805 CVE-2026-3805 in curl - Patched by Root

Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

NeDi 1.9C - Cross-Site Scripting

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...

mooSocial 3.1.8 - External Service Interaction

mooSocial 3.1.8 is vulnerable to external service interaction via multiple parameters in the post function. id: CVE-2023-43323 info: name: mooSocial 3.1.8 - External Service Interaction author: ritikchaddha severity: medium description: | mooSocial 3.1.8 is vulnerable to external service...

Movies <= 0.6 - Cross-Site Scripting

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4539 info: name: Movies = 0.6 - Cross-Site Scripting author: daffainfo...

kkFileView 4.1.0 - Cross-Site Scripting

kkFileView 4.1.0 contains multiple cross-site scripting vulnerabilities via the errorMsg parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

Odoo <= 8.0-20160726 & 9.0 - Open Redirect

An Open Redirect vulnerability in Odoo versions = 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL. id: CVE-2017-5871 info: name: Odoo = 8.0-20160726 & 9.0 - Open Redirect author: 1337rokudenashi severity: medium description: | An Open...

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

mooSocial v.3.1.8 - Cross-Site Scripting

Cross-Site Scripting XSS vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function. id: CVE-2023-44813 info: name: mooSocial v.3.1.8 - Cross-Site Scripting author: ritikchaddha severity:...

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

ROOT-APP-PYPI-GHSA-4GMW-GG2M-W46P GHSA-4gmw-gg2m-w46p in GitPython - Patched by Root

Root has patched GHSA-4gmw-gg2m-w46p in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-45133 CVE-2023-45133 in babel-traverse - Patched by Root

Root has patched CVE-2023-45133 in the babel-traverse package for Root:npm. Multiple fixed versions available...

docker-confluence-patched

docker-confluence-patched Patched Confluence 7.12.2 CVE-2021-26084...

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-18917 affecting package libvirt for versions less than 11.9.0-1

CVE-2026-18917 affecting package libvirt for versions less than 11.9.0-1. A patched version of the package is available...

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6. A patched version of the package is available...

ROOT-OS-DEBIAN-11-CVE-2024-5642 CVE-2024-5642 in python3.9 - Patched by Root

Root has patched CVE-2024-5642 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...