Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ALSA-2026:34357 |
|
Vulnerability in opentelemetry-collector (ALSA-2026:34357)
vulnerability in opentelemetry-collector (ALSA-2026:34357). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.152.1-1.el10_2` or later.
|
| ALSA-2026:34359 |
|
Vulnerability in opentelemetry-collector (ALSA-2026:34359)
vulnerability in opentelemetry-collector (ALSA-2026:34359). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.152.1-1.el9_8` or later.
|
| openSUSE-SU-2026:11170-1 |
|
Vulnerability in python-python-engineio (openSUSE-SU-2026:11170-1)
vulnerability in python-python-engineio (openSUSE-SU-2026:11170-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.13.3-1.1` or later.
|
| openSUSE-SU-2026:11171-1 |
|
Vulnerability in python-python-socketio (openSUSE-SU-2026:11171-1)
vulnerability in python-python-socketio (openSUSE-SU-2026:11171-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.16.3-1.1` or later.
|
| openSUSE-SU-2026:11169-1 |
|
Vulnerability in python-onionshare (openSUSE-SU-2026:11169-1)
vulnerability in python-onionshare (openSUSE-SU-2026:11169-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.6.4-1.1` or later.
|
| openSUSE-SU-2026:11167-1 |
|
Vulnerability in kubectl-cnpg (openSUSE-SU-2026:11167-1)
vulnerability in kubectl-cnpg (openSUSE-SU-2026:11167-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.29.2-1.1` or later.
|
| openSUSE-SU-2026:11168-1 |
|
Vulnerability in perl-CGI-Session (openSUSE-SU-2026:11168-1)
vulnerability in perl-CGI-Session (openSUSE-SU-2026:11168-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.490.0-1.1` or later.
|
| openSUSE-SU-2026:11166-1 |
|
Vulnerability in c3p0 (openSUSE-SU-2026:11166-1)
vulnerability in c3p0 (openSUSE-SU-2026:11166-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.14.1-1.1` or later.
|
| openSUSE-SU-2026:11165-1 |
|
Vulnerability in alloy (openSUSE-SU-2026:11165-1)
vulnerability in alloy (openSUSE-SU-2026:11165-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.17.1-1.1` or later.
|
| openSUSE-SU-2026:11164-1 |
|
Vulnerability in MozillaThunderbird (openSUSE-SU-2026:11164-1)
vulnerability in MozillaThunderbird (openSUSE-SU-2026:11164-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `140.12.1-1.1` or later.
|
| ALSA-2026:34354 |
|
Vulnerability in apcu-panel (ALSA-2026:34354)
vulnerability in apcu-panel (ALSA-2026:34354). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.18-1.module_el8.6.0+2750+78feabcb` or later.
|
| ALSA-2026:34355 |
|
Vulnerability in mod_http2 (ALSA-2026:34355)
vulnerability in mod_http2 (ALSA-2026:34355). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.29-4.el10_2.2` or later.
|
| ALSA-2026:34156 |
|
Vulnerability in python3-rrdtool (ALSA-2026:34156)
vulnerability in python3-rrdtool (ALSA-2026:34156). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.2-22.el9_8` or later.
|
| ALSA-2026:34155 |
|
Vulnerability in python3-rrdtool (ALSA-2026:34155)
vulnerability in python3-rrdtool (ALSA-2026:34155). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-17.el8_10` or later.
|
| ALSA-2026:34109 |
|
Vulnerability in httpd (ALSA-2026:34109)
vulnerability in httpd (ALSA-2026:34109). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.63-13.el10_2.4` or later.
|
| CVE-2026-13774 |
|
Use-After-Free in Google chrome (CVE-2026-13774)
vulnerability in Google chrome (CVE-2026-13774). Successful exploitation can lead to full system takeover.
|
| DEBIAN-CVE-2026-56369 |
|
Vulnerability in imagemagick (DEBIAN-CVE-2026-56369)
vulnerability in imagemagick (DEBIAN-CVE-2026-56369). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8:7.1.2.23+dfsg1-1` or later.
|
| CVE-2026-55223 |
|
Unsafe Deserialization in com.mchange:c3p0 (CVE-2026-55223)
vulnerability in com.mchange:c3p0 (CVE-2026-55223). Risk of unauthorized operations or information disclosure. Exploitable via ``DataSource``. Mitigation: upgrade to `0.14.0` or later.
|
| CVE-2026-54696 |
|
Vulnerability in json (CVE-2026-54696)
vulnerability in json (CVE-2026-54696). Risk of unauthorized operations or information disclosure. Exploitable via ``FBUFFER_IO_BUFFER_SIZE``. Mitigation: upgrade to `2.19.9` or later.
|
| CVE-2026-54673 |
|
Information Disclosure in builder-util-runtime (CVE-2026-54673)
vulnerability in builder-util-runtime (CVE-2026-54673). Confidential information can be exposed externally. Exploitable via ``HttpExecutor.prepareRedirectUrlOptions``. Mitigation: upgrade to `9.7.0` or later.
|
| CVE-2026-54672 |
|
Vulnerability in app-builder-lib (CVE-2026-54672)
vulnerability in app-builder-lib (CVE-2026-54672). Successful exploitation can lead to full system takeover. Exploitable via ``AppImage``. Mitigation: upgrade to `26.15.0` or later.
|
| UBUNTU-CVE-2026-13885 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13885)
vulnerability in libskia (UBUNTU-CVE-2026-13885). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-13971 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13971)
vulnerability in libskia (UBUNTU-CVE-2026-13971). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-13841 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13841)
vulnerability in libskia (UBUNTU-CVE-2026-13841). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-13820 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13820)
vulnerability in libskia (UBUNTU-CVE-2026-13820). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-13781 |
|
Vulnerability in libskia (UBUNTU-CVE-2026-13781)
vulnerability in libskia (UBUNTU-CVE-2026-13781). Successful exploitation can lead to full system takeover.
|
| SUSE-SU-2026:22436-1 |
|
Vulnerability in kernel-default (SUSE-SU-2026:22436-1)
vulnerability in kernel-default (SUSE-SU-2026:22436-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.4.0-48.1` or later.
|
| SUSE-SU-2026:22459-1 |
|
Vulnerability in pcr-oracle (SUSE-SU-2026:22459-1)
vulnerability in pcr-oracle (SUSE-SU-2026:22459-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.3-slfo.1.1_1.1` or later.
|
| CVE-2026-57585 |
|
Use-After-Free in dos (CVE-2026-57585)
vulnerability in dos (CVE-2026-57585). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57204 |
|
Vulnerability in dos (CVE-2026-57204)
vulnerability in dos (CVE-2026-57204). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-57585 |
|
Vulnerability in python-pip (UBUNTU-CVE-2026-57585)
vulnerability in python-pip (UBUNTU-CVE-2026-57585). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52868 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-52868)
vulnerability in dcmtk (UBUNTU-CVE-2026-52868). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-50254 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-50254)
vulnerability in dcmtk (UBUNTU-CVE-2026-50254). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-50003 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-50003)
vulnerability in dcmtk (UBUNTU-CVE-2026-50003). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-35505 |
|
Vulnerability in dcmtk (UBUNTU-CVE-2026-35505)
vulnerability in dcmtk (UBUNTU-CVE-2026-35505). Confidential information can be exposed externally.
|
| CVE-2025-36328 |
|
Vulnerability in ibm (CVE-2025-36328)
vulnerability in ibm (CVE-2025-36328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44628 |
|
Vulnerability in CVE-2026-44628 (CVE-2026-44628)
vulnerability in CVE-2026-44628 (CVE-2026-44628). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36336 |
|
Vulnerability in ibm (CVE-2025-36336)
vulnerability in ibm (CVE-2025-36336). Confidential information can be exposed externally.
|
| CVE-2026-13207 |
|
Vulnerability in CVE-2026-13207 (CVE-2026-13207)
vulnerability in CVE-2026-13207 (CVE-2026-13207). Confidential information can be exposed externally.
|
| CVE-2025-36359 |
|
Vulnerability in ibm (CVE-2025-36359)
vulnerability in ibm (CVE-2025-36359). Confidential information can be exposed externally.
|
| CVE-2026-9106 |
|
Vulnerability in github (CVE-2026-9106)
vulnerability in github (CVE-2026-9106). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36323 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2025-36323)
cross-site scripting in ibm (CVE-2025-36323). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10562 |
|
Open Redirect in path-traversal (CVE-2026-10562)
vulnerability in path-traversal (CVE-2026-10562). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36333 |
|
Vulnerability in ibm (CVE-2025-36333)
vulnerability in ibm (CVE-2025-36333). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11594 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-11594)
cross-site scripting in ibm (CVE-2026-11594). Confidential information can be exposed externally.
|
| CVE-2026-9132 |
|
Vulnerability in github (CVE-2026-9132)
vulnerability in github (CVE-2026-9132). Confidential information can be exposed externally.
|
| CVE-2025-36324 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-36324)
SSRF in ssrf (CVE-2025-36324). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-36327 |
|
Vulnerability in ibm (CVE-2025-36327)
vulnerability in ibm (CVE-2025-36327). Data can be tampered with by attackers.
|
| CVE-2025-36321 |
|
Vulnerability in ibm (CVE-2025-36321)
vulnerability in ibm (CVE-2025-36321). Confidential information can be exposed externally.
|
| CVE-2026-7874 |
|
Vulnerability in langflow (CVE-2026-7874)
vulnerability in langflow (CVE-2026-7874). Confidential information can be exposed externally.
|