BIT-MARIADB-MIN-2026-44172 MariaDB: mysql_real_escape_string() incorrectly handled big5

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysqlrealescapestring and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections,...

EUVD-2026-36757

Bludit CMS before version 3.18.4 allows Remote Code Execution RCE via the API Plugin. The POST /api/files/key endpoint in bl-plugins/api/plugin.php fails to perform authorization checks and lacks file extension validation. An attacker with a valid API token can upload a malicious PHP script and...

ROOT-OS-ALPINE-318-CVE-2023-46846 CVE-2023-46846 in rootio-squid - Patched by Root

Root has patched CVE-2023-46846 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-48235 CVE-2023-48235 in rootio-vim - Patched by Root

Root has patched CVE-2023-48235 in the rootio-vim package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-43374 CVE-2024-43374 in rootio-vim - Patched by Root

Root has patched CVE-2024-43374 in the rootio-vim package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-51384 CVE-2023-51384 in rootio-openssh - Patched by Root

Root has patched CVE-2023-51384 in the rootio-openssh package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-51385 CVE-2023-51385 in rootio-openssh - Patched by Root

Root has patched CVE-2023-51385 in the rootio-openssh package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-28085 CVE-2024-28085 in rootio-util-linux - Patched by Root

Root has patched CVE-2024-28085 in the rootio-util-linux package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-50229 CVE-2023-50229 in rootio-bluez - Patched by Root

Root has patched CVE-2023-50229 in the rootio-bluez package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2000-0548 CVE-2000-0548 in rootio-krb5 - Patched by Root

Root has patched CVE-2000-0548 in the rootio-krb5 package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-10525 CVE-2024-10525 in rootio-mosquitto - Patched by Root

Root has patched CVE-2024-10525 in the rootio-mosquitto package for Root:Alpine:3.18. Multiple fixed versions available...

CVE-2026-25100 Stored XSS via SVG File Upload in Bludit

Bludit is vulnerable to Stored Cross-Site Scripting XSS in its image upload functionality. An authenticated attacker with content upload privileges such as Author, Editor, or Administrator can upload an SVG file containing a malicious payload, which is executed when a victim visits the URL of the...

ROOT-OS-ALPINE-318-CVE-2021-33454 CVE-2021-33454 in rootio-yasm - Patched by Root

Root has patched CVE-2021-33454 in the rootio-yasm package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-31975 CVE-2023-31975 in rootio-yasm - Patched by Root

Root has patched CVE-2023-31975 in the rootio-yasm package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-33460 CVE-2023-33460 in rootio-yajl - Patched by Root

Root has patched CVE-2023-33460 in the rootio-yajl package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2024-22365 CVE-2024-22365 in rootio-linux-pam - Patched by Root

Root has patched CVE-2024-22365 in the rootio-linux-pam package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-38471 CVE-2023-38471 in rootio-avahi - Patched by Root

Root has patched CVE-2023-38471 in the rootio-avahi package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-7256 CVE-2023-7256 in rootio-libpcap - Patched by Root

Root has patched CVE-2023-7256 in the rootio-libpcap package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-40305 CVE-2023-40305 in rootio-indent - Patched by Root

Root has patched CVE-2023-40305 in the rootio-indent package for Root:Alpine:3.18. Multiple fixed versions available...

Path Traversal node-tar Dependency in Jira Software Data Center

This High severity Path Traversal vulnerability was introduced in versions 9.15.2, 9.16.0, 9.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.1 of Jira Software Data Center. This Path Traversal vulnerability, with a CVSS Score of 8.8 and a CVS...