13843 matches found
ROOT-OS-DEBIAN-12-CVE-2025-37798 CVE-2025-37798 in linux - Patched by Root
Root has patched CVE-2025-37798 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38569 CVE-2025-38569 in linux - Patched by Root
Root has patched CVE-2025-38569 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-31394 CVE-2026-31394 in linux - Patched by Root
Root has patched CVE-2026-31394 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-14040 CVE-2024-14040 in linux - Patched by Root
Root has patched CVE-2024-14040 in the linux package for Root:Debian:12. Multiple fixed versions available...
SUSE CVE-2026-64566
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFLSHAREDFRAG in iptfsskbaddfrags When iptfsskbaddfrags copies frag references from the source frag walk into a new SKB, it increments the page reference count via skbfragref but does not propagate...
ffmpeg-4-4.4.8-3.1 on GA media (moderate)
ffmpeg-4-4.4.8-3.1 on GA media Announcement ID: openSUSE-SU-2026:11448-1 Rating: moderate Cross-References: CVE-2026-64830 CVE-2026-64832 CVE-2026-64835 CVE-2026-66038 CVE-2026-66039 CVSS scores: CVE-2026-64830 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-64830 SUSE : 8.5...
RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - aom (Important) (RHSA-2026:51146)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51146 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...
CVE-2026-71313 rclone: Local Encoding Path Traversal
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-20268
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-20269 Cisco IOS XE Software Security Hardening Release
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-70599
CVE-2026-70599 concerns Electron. Before versions 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, permission checks for serial-port and media accessed via an iframe could pass the top‑level origin to session.setPermissionCheckHandler instead of the requesting iframe origin. This allowed an origin‑base...
CVE-2026-70595 Ghost: Server-Side Request Forgery Mitigation Issue
Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...
ROOT-APP-PYPI-GHSA-V396-V7Q4-X2QJ GHSA-v396-v7q4-x2qj in GitPython - Patched by Root
Root has patched GHSA-v396-v7q4-x2qj in the GitPython package for Root:PyPI. Multiple fixed versions available...
Astra Linux – Vulnerability in Firefox
Use-after-free in the DOM: Core & HTML components. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
UBUNTU-CVE-2026-64578
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:3476-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3476-1 advisory. This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-1133...
ROOT-APP-PYPI-CVE-2026-48526 CVE-2026-48526 in pyjwt - Patched by Root
Root has patched CVE-2026-48526 in the pyjwt package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1784943220 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 4.1.0-tuxcare.3...