CLEANSTART-2026-CX57475 Security fixes in rancher-fleet-agent 0.13.13-r0

Package rancher-fleet-agent version 0.13.13-r0 fixes 39 vulnerabilities: CVE-2026-53492, CVE-2026-50195, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

CLEANSTART-2026-EQ48290 Security fixes in kuberay-operator 1.5.2-r3

Package kuberay-operator version 1.5.2-r3 fixes 12 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

ROOT-APP-NPM-CVE-2026-59871 CVE-2026-59871 in tar - Patched by Root

Root has patched CVE-2026-59871 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26960 CVE-2026-26960 in tar - Patched by Root

Root has patched CVE-2026-26960 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-31802 CVE-2026-31802 in tar - Patched by Root

Root has patched CVE-2026-31802 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in tar - Patched by Root

Root has patched CVE-2026-24842 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-23950 CVE-2026-23950 in tar - Patched by Root

Root has patched CVE-2026-23950 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29786 CVE-2026-29786 in tar - Patched by Root

Root has patched CVE-2026-29786 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59873 CVE-2026-59873 in tar - Patched by Root

Root has patched CVE-2026-59873 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59875 CVE-2026-59875 in tar - Patched by Root

Root has patched CVE-2026-59875 in the tar package for Root:npm. Multiple fixed versions available...

React-Next-Scanner

React-Next-Scanner Scanner CLI sécurisé pour CVE-2025-55182 et CVE-2025-66478 Cet outil fournit un scanner de vulnérabilités léger et non exploitant, axé sur les piles JavaScript modernes, plus précisément : Services API affectés par CVE-2025-55182 Applications Next.js affectées par CVE-2025-6647...

log4j-CVE-2021-44228

Este repositorio no tiene un README...

ROOT-APP-NPM-CVE-2026-59880 CVE-2026-59880 in immutable - Patched by Root

Root has patched CVE-2026-59880 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29063 CVE-2026-29063 in immutable - Patched by Root

Root has patched CVE-2026-29063 in the immutable package for Root:npm. Multiple fixed versions available...

WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvividuploadimportfiles' function in all versions up to, and including, 0.9.116. id: CVE-2025-5961 info: name: WordPress WPvivid...

Oracle Weblogic - Server-Side Request Forgery

An unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. id: CVE-2014-4210 info: name: Oracle Weblogic - Server-Side Request Forgery author:...

Totaljs <3.2.3 - Local File Inclusion

Total.js Platform before 3.2.3 is vulnerable to local file inclusion. id: CVE-2019-8903 info: name: Totaljs 3.2.3 - Local File Inclusion author: madrobot severity: high description: Total.js Platform before 3.2.3 is vulnerable to local file inclusion. impact: | An attacker can exploit this...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

Avada < 7.11.7 - Information Disclosure

The Avada theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.11.6 via the '/wp-content/uploads/fusion-forms/' directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via an Avada created form with ...

WordPress Time Capsule < 1.21.16 - Authentication Bypass

WordPress Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWPJSONPREFIX causes the client to be logged in as the first account on the list of administrator accounts. id: CVE-2020-8771 info: name: WordPress Time Capsule 1.21.16 - Authentication...