ROOT-APP-MAVEN-CVE-2026-33180 CVE-2026-33180 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-33180 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-55471 CVE-2026-55471 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-55471 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34359 CVE-2026-34359 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-34359 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

[SECURITY] Fedora 45 Update: open-vm-tools-13.1.0-9.fc45

The open-vm-tools project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and...

[SECURITY] Fedora 45 Update: gnome-doc-utils-0.20.10-48.fc45

gnome-doc-utils is a collection of documentation utilities for the GNOME project. Notably, it contains utilities for building documentation and all auxiliary files in your source tree...

[SECURITY] Fedora 45 Update: GAPDoc-1.6.10-4.fc45

This package describes a document format for writing GAP documentation. The idea is to define a sufficiently abstract markup language for GAP documentation which can be relatively easily converted into different output formats. We used XML to define such a language. This package provides: -...

CVE-2026-101888

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...

CVE-2026-101888

The Prime Mover plugin for WordPress (versions before 2.2.1 ) is vulnerable to a Zip Slip path traversal vulnerability. This flaw allows authenticated administrators to write arbitrary files outside the intended extraction directory during a migration ZIP import. The root cause lies in the comput...

EUVD-2026-90911

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...

CVE-2026-103757 Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation

Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...

PT-2026-103911

Name of the Vulnerable Software and Affected Versions Prime Mover plugin for WordPress versions prior to 2.2.1 Description A Zip Slip path traversal issue exists during the migration ZIP import process. Authenticated administrators can write arbitrary files outside the intended extraction directo...

CVE-2026-103757: Server-Side Request Forgery (SSRF)

Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...

CVE-2026-101888: Improper Limitation of a Pathname to a Restricted Directory

The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences...

ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root

Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...

CVE-2026-63713: Improper Neutralization of Special Elements used in an SQL Command

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

PT-2026-99198

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.3.22 through 2026.8.0 Description An approval-bypass flaw exists in the exec approval policy. The policy may trust a command-running wrapper without inspecting the command contained within its arguments. If an operator...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483: Improper Neutralization of Special Elements used in an OS Command

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

PT-2026-95088

Name of the Vulnerable Software and Affected Versions MitraStar GPT-2741GNAC-N2-SV version BR g8.10 1.11WVK.0b46 Description Authenticated users can execute arbitrary operating system commands through the ping diagnostics and similar functions. This occurs via concatenated parameters sent in a...