5198 matches found
ROOT-OS-DEBIAN-11-CVE-2025-38572 CVE-2025-38572 in linux - Patched by Root
Root has patched CVE-2025-38572 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-38706 CVE-2025-38706 in linux - Patched by Root
Root has patched CVE-2025-38706 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-46113 CVE-2026-46113 in linux - Patched by Root
Root has patched CVE-2026-46113 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-49571 CVE-2024-49571 in linux - Patched by Root
Root has patched CVE-2024-49571 in the linux package for Root:Debian:11. Multiple fixed versions available...
EUVD-2026-44804
NocoBase backup restore schema name allows command injection...
CVE-2026-74955
Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
EUVD-2026-54679
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an...
CVE-2026-59717
CVE-2026-59717 affects the Android companion for Home Assistant prior to 2026.6.1. The issue is an open redirect in the homeassistant://invite flow where the URL fragment is passed into the onboarding WebView without displaying the destination hostname. As a result, a victim cannot distinguish a ...
CVE-2026-19012 Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path
Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path that may allow an authorized caller to crash the Consul server. A caller with config-entry write permission can submit a...
Linux Distros Unpatched Vulnerability : CVE-2026-71436
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY...
EUVD-2026-41940
Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth...
CLSA-2026-1786021276 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 4.0.post8+tuxcare...
CVE-2026-17556
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...
ROOT-APP-NPM-CVE-2025-57810 CVE-2025-57810 in jspdf - Patched by Root
Root has patched CVE-2025-57810 in the jspdf package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerability in Firefox
Incorrect boundary conditions in the DOM: DeviceInterfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
EUVD-2026-52977
Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...
CVE-2026-70590
Ghost CMS (Node.js) prior to version 6.54.1 allowed staff-level users to leak other staff password hashes via the Ghost Admin API. The underlying issue is exposure of authentication data, enabling offline password guessing with potential account takeover; however, Device Verification was noted as...