292245 matches found
ROOT-OS-UBUNTU-2204-CVE-2025-68308 CVE-2025-68308 in linux - Patched by Root
Root has patched CVE-2025-68308 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-49568 CVE-2024-49568 in linux - Patched by Root
Root has patched CVE-2024-49568 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
CVE-2026-107935 Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
Security update for grafana, system-user-grafana
This update for grafana, system-user-grafana fixes the following issues: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...
SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana
This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...
USN-8887-3: Linux kernel vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...
USN-8903-2 linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...
USN-8903-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...
USN-8905-2 linux-gcp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...
ROOT-OS-DEBIAN-12-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root
Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:12. Multiple fixed versions available...
santa
Santa !NOTE A partir de 2025, Santa ya no cuenta con el mantenimiento de Google. Animamos a los usuarios actuales a migrar a un fork de Santa que se mantenga activamente, como https://github.com/northpolesec/santa. Santa es un sistema de autorización de acceso a binarios y archivos para macOS...
golismero
¿Qué es GoLismero? GoLismero es un marco de código abierto para pruebas de seguridad. Actualmente está orientado a la seguridad web, pero puede ampliarse fácilmente a otros tipos de escaneos. Las características más interesantes del marco son: Independencia real de plataforma. Probado en Windows,...
ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3-defaults - Patched by Root
Root has patched CVE-2026-3644 in the python3-defaults package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-94668: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5...
PT-2026-108837
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5...
PT-2026-108953
Name of the Vulnerable Software and Affected Versions SmarterMail versions prior to build 9777 Description A remote code execution issue exists where an attacker with a SysAdmin-scoped access token can bypass Volume Mount script-directory containment. This is achieved by provisioning a new mail...
ROS-20261009-73-0290
The vulnerability in the drivers/net/ethernet/xscale/ixp4xxeth.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20261009-73-0279
The vulnerability of the drivers/staging/rtl8723bs/core/rtwmlme.c component in the Linux kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20261009-73-0163
The vulnerability of the vc4freehangstate function in the drivers/gpu/drm/vc4/vc4gem.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability can allow an attacker to cause a system...
ROS-20261009-73-0159
The vulnerability of the vc4savehangstate function in the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker to cause a system...