ROOT-OS-UBUNTU-2204-CVE-2026-64385 CVE-2026-64385 in linux - Patched by Root

Root has patched CVE-2026-64385 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-49393 CVE-2022-49393 in linux - Patched by Root

Root has patched CVE-2022-49393 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-23156 CVE-2025-23156 in linux - Patched by Root

Root has patched CVE-2025-23156 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68788 CVE-2025-68788 in linux - Patched by Root

Root has patched CVE-2025-68788 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2024-47683 CVE-2024-47683 in linux - Patched by Root

Root has patched CVE-2024-47683 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68772 CVE-2025-68772 in linux - Patched by Root

Root has patched CVE-2025-68772 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68214 CVE-2025-68214 in linux - Patched by Root

Root has patched CVE-2025-68214 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-34034 CVE-2025-34034 in linux - Patched by Root

Root has patched CVE-2025-34034 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-64078 CVE-2026-64078 in linux - Patched by Root

Root has patched CVE-2026-64078 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-43241 CVE-2026-43241 in linux - Patched by Root

Root has patched CVE-2026-43241 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-39748 CVE-2025-39748 in linux - Patched by Root

Root has patched CVE-2025-39748 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

EUVD-2025-210631

The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...

EUVD-2025-210629

The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated sessions. This allows an attacker who has obtained an access token for an impersonated user to leverage the refresh token grant to obtain new access tokens, extending their...

CVE-2024-10302

The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes. Allowing unvalidated input into user claims can lead to various...

EUVD-2024-55708

The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalidated data to be included within user claims, which are then used by downstream processes. Allowing unvalidated input into user claims can lead to various...

CVE-2026-19019

The CVE-2026-19019 entry concerns poco-ai poco-agent (up to 0.5.4) with a vulnerable area in WorkspaceManager._setup_session_persistence within executor/app/core/workspace.py of Claude File Handler. Reported impact is incomplete cleanup, potentially enabling remote abuse. Public disclosure exists...

CVE-2026-14314

The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 does not verify that a requested attachment belongs to the order referenced by its access token, allowing unauthenticated attackers to forge a token and disclose image attachments, including other customers' uploaded payment...

CVE-2026-64594

In the Linux kernel, the following vulnerability has been resolved: u...

Malicious code in @voxepay/checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce33339fdc1c4c994f6062588e4f4278ee9074ddb04759504100e89084f4a96 No suspicious behaviors were identified in this package version. There are no install-time lifecycle scripts performing remote fetches, no hardcoded...

Malicious code in @simplipayng/checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ead1207956df050d2746ae899d5ea9132fbc4c35684f9e992599c5ef10259c The bundled main dist/index.js executes an evalatob... blob at module top level, so any Node-side require of the package SSR, tests, Next.js server...