CVE-2026-78185

creationtimestamp| type| source ---|---|--- 2026-08-24 08:15:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78185...

CVE-2026-78179

creationtimestamp| type| source ---|---|--- 2026-08-24 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78179...

ROOT-OS-DEBIAN-13-CVE-2025-61728 CVE-2025-61728 in golang-1.24 - Patched by Root

Root has patched CVE-2025-61728 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-58189 CVE-2025-58189 in golang-1.24 - Patched by Root

Root has patched CVE-2025-58189 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-61724 CVE-2025-61724 in golang-1.24 - Patched by Root

Root has patched CVE-2025-61724 in the golang-1.24 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61863 CVE-2026-61863 in imagemagick - Patched by Root

Root has patched CVE-2026-61863 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56373 CVE-2026-56373 in imagemagick - Patched by Root

Root has patched CVE-2026-56373 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-56366 CVE-2026-56366 in imagemagick - Patched by Root

Root has patched CVE-2026-56366 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-53571 CVE-2026-53571 in vite - Patched by Root

Root has patched CVE-2026-53571 in the vite package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-39316 CVE-2026-39316 in cups - Patched by Root

Root has patched CVE-2026-39316 in the cups package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-34980 CVE-2026-34980 in cups - Patched by Root

Root has patched CVE-2026-34980 in the cups package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root

Root has patched CVE-2026-50219 in the expat package for Root:Debian:13. Multiple fixed versions available...

Microweber Information Disclosure

Microweber contains a vulnerability that allows exposure of sensitive information to an unauthorized actor in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0281 info: name: Microweber Information Disclosure author: pikpikcu severity: high description: Microweber contains a...

Users Ultra <= 3.1.0 - SQL Injection

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...

Bonita Web 2021.2 - Authentication/Authorization Bypass

Bonita Web 2021.2 contains an authentication/authorization bypass vulnerability caused by an overly broad exclude pattern in RestAPIAuthorizationFilter, allowing unauthenticated users to access privileged API endpoints by appending ;i18ntranslation or /../i18ntranslation/ to the URL. id:...

Gitea <1.16.5 - Open Redirect

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-1058 info: name: Gitea 1.16.5 - Open Redire...

WordPress Copyright Proof <=4.16 - Cross-Site-Scripting

WordPress Copyright Proof plugin 4.16 and prior contains a cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users when a specific setting is enabled. id: CVE-2022-1906...

Liferay Portal - Cross-site Scripting

A Cross-site scripting XSS vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the tag parameter. id:...

CandidATS 3.0.0 - Cross-Site Scripting

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the page parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...