79777 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in mergerelocroots If we have an unexpected relocroot for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missi...
ROOT-APP-PYPI-CVE-2026-6357 CVE-2026-6357 in pip - Patched by Root
Root has patched CVE-2026-6357 in the pip package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-8869 CVE-2025-8869 in pip - Patched by Root
Root has patched CVE-2025-8869 in the pip package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-5752 CVE-2023-5752 in pip - Patched by Root
Root has patched CVE-2023-5752 in the pip package for Root:PyPI. Multiple fixed versions available...
CVE-2026-111560
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...
CVE-2026-111560 OS Command Injection in Barracuda Appliances
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...
EUVD-2026-115148
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...
CVE-2026-111560
Certain Barracuda appliance products are vulnerable to OS command injection due to the improper neutralization of shell metacharacters in the timezone configuration field . An authenticated administrator can inject and execute arbitrary OS commands with root privileges when a crafted timezone val...
CVE-2026-111560 OS Command Injection in Barracuda Appliances
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
flatpak: flatpak: Arbitrary write access as root via extra-data extraction
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...
ROOT-APP-NPM-GHSA-2464-FHR4-W9XW GHSA-2464-fhr4-w9xw in next - Patched by Root
Root has patched GHSA-2464-fhr4-w9xw in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-5J59-XGG2-R9C4 GHSA-5j59-xgg2-r9c4 in next - Patched by Root
Root has patched GHSA-5j59-xgg2-r9c4 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-75604 CVE-2026-75604 in next - Patched by Root
Root has patched CVE-2026-75604 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64641 CVE-2026-64641 in next - Patched by Root
Root has patched CVE-2026-64641 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44573 CVE-2026-44573 in next - Patched by Root
Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root
Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...