ROOT-OS-ALPINE-321-CVE-2026-3442 CVE-2026-3442 in binutils - Patched by Root

Root has patched CVE-2026-3442 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

CVE-2025-49809 affecting package mtr for versions less than 0.95-3

CVE-2025-49809 affecting package mtr for versions less than 0.95-3. A patched version of the package is available...

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4

CVE-2025-22872 affecting package cert-manager for versions less than 1.12.15-4. A patched version of the package is available...

CVE-2024-53203 affecting package kernel for versions less than 6.6.90.1-1

CVE-2024-53203 affecting package kernel for versions less than 6.6.90.1-1. A patched version of the package is available...

CVE-2025-32912 affecting package libsoup for versions less than 3.0.4-7

CVE-2025-32912 affecting package libsoup for versions less than 3.0.4-7. A patched version of the package is available...

CVE-2024-44938 affecting package kernel for versions less than 5.15.182.1-1

CVE-2024-44938 affecting package kernel for versions less than 5.15.182.1-1. A patched version of the package is available...

CVE-2024-56751 affecting package kernel for versions less than 5.15.182.1-1

CVE-2024-56751 affecting package kernel for versions less than 5.15.182.1-1. A patched version of the package is available...

CVE-2025-48953

Umbraco is an ASP.NET content management system CMS. Starting in version 14.0.0 and prior to versions 15.4.2 and 16.0.0, it's possible to upload a file that doesn't adhere with the configured allowable file extensions via a manipulated API request. The issue is patched in versions 15.4.2 and...

CVE-2025-21859 affecting package kernel for versions less than 5.15.179.1-1

CVE-2025-21859 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...

CVE-2025-22868 affecting package vitess for versions less than 17.0.7-5

CVE-2025-22868 affecting package vitess for versions less than 17.0.7-5. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2024-55642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential deadlocks in zone write plug error recovery Zone write plugging for...

Linux Distros Unpatched Vulnerability : CVE-2022-49489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runti...

CVE-2022-36034

nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of and with many repetitions of |. This issue has been patched in all versions above 0.2.5. There are currently no known workarounds...

CVE-2020-5259

In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

CVE-2022-24822 Denial of Service in @podium/layout and @podium/proxy

Podium is a library for building micro frontends. @podium/layout is a module for building a Podium layout server, and @podium/proxy is a module for proxying HTTP requests from a layout server to a podlet server. In @podium/layout prior to version 4.6.110 and @podium/proxy prior to version 4.2.74,...

oldechurch.com Cross Site Scripting vulnerability OBB-2355515

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

custompublish.com Cross Site Scripting vulnerability OBB-2322029

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wewigs.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112092 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting wewigs.com website and its...

comodo.bluesnap.com XSS vulnerability

Vulnerable URL: https://comodo.bluesnap.com/jsp/buynow.jsp?contractId=3209254=939126&custom2;=Y&custom3;=Comodo&custom6;=%22--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.08.2017 Latest check for patch:| 28.08.2017 09:53 GMT Vulnerability...

mail.andover.co.uk XSS vulnerability

Vulnerable URL: https://mail.andover.co.uk/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...