CVE-2025-30204 affecting package keda for versions less than 2.4.0-32

CVE-2025-30204 affecting package keda for versions less than 2.4.0-32. A patched version of the package is available...

CVE-2025-38694 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38694 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39844 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39844 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39806 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39806 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38725 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38725 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38529 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38529 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38527 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38527 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38464 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38464 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38461 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38461 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38389 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38389 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-71154 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-71154 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38236 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38236 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

RustSec Advisory

Impact Vulnerability Type: Improper Control of Generation of Code 'Code Injection' CWE-94 / Improper Check for Unusual or Exceptional Conditions CWE-754 / Improper Input Validation CWE-20 / Use of Low-Level Functionality CWE-695 / Improper Privilege Management CWE-269 / External Control of System...

CVE-2025-68555

CVE-2025-68555 affects the Nutrie WordPress theme by zozothemes and is an Unrestricted Upload of File with Dangerous Type vulnerability that allows uploading a web shell. Affected versions are Nutrie

UBUNTU-CVE-2026-3103

A logic error in the removepassword function in Checkmk GmbH's Checkmk versions 2.4.0p23, 2.3.0p43, and 2.2.0 EOL allows a low-privileged user to cause data loss...

CVE-2026-3452

Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter. An authenticated administrator can store attacker-controlled serialized data in block configuration fields that are later passed to...

CVE-2026-3242 Concrete CMS below 9.4.8 is vulnerable to Stored XSS in the Switch Language block

In Concrete CMS below version 9.4.8, a rogue administrator can add stored XSS via the Switch Language block. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks M3dium for reporting...

CVE-2026-27965 affecting package vitess for versions less than 19.0.4-8

CVE-2026-27965 affecting package vitess for versions less than 19.0.4-8. A patched version of the package is available...

CVE-2026-22717

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...