Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| SUSE-SU-2026:2655-1 |
|
Vulnerability in python36 (SUSE-SU-2026:2655-1)
vulnerability in python36 (SUSE-SU-2026:2655-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.15-111.1` or later.
|
| SUSE-SU-2026:2654-1 |
|
Vulnerability in libsoup2 (SUSE-SU-2026:2654-1)
vulnerability in libsoup2 (SUSE-SU-2026:2654-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.74.3-150600.4.36.1` or later.
|
| SUSE-SU-2026:2653-1 |
|
Vulnerability in util-linux (SUSE-SU-2026:2653-1)
vulnerability in util-linux (SUSE-SU-2026:2653-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.37.2-150400.8.47.1` or later.
|
| SUSE-SU-2026:2652-1 |
|
Vulnerability in haproxy (SUSE-SU-2026:2652-1)
vulnerability in haproxy (SUSE-SU-2026:2652-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.11+git0.01c1056a4-150600.3.15.1` or later.
|
| SUSE-SU-2026:2651-1 |
|
Vulnerability in haproxy (SUSE-SU-2026:2651-1)
vulnerability in haproxy (SUSE-SU-2026:2651-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.22+git0.f8e3218e2-150400.3.28.1` or later.
|
| GHSA-97cf-xxww-v429 |
|
Vulnerability in rollup-plugin-polyfill-connect (GHSA-97cf-xxww-v429)
vulnerability in rollup-plugin-polyfill-connect (GHSA-97cf-xxww-v429). Risk of unauthorized operations or information disclosure.
|
| GHSA-3462-7h42-6cvg |
|
Vulnerability in react-icon-svgs (GHSA-3462-7h42-6cvg)
vulnerability in react-icon-svgs (GHSA-3462-7h42-6cvg). Risk of unauthorized operations or information disclosure.
|
| RLSA-2026:29980 |
|
Vulnerability in golang (RLSA-2026:29980)
vulnerability in golang (RLSA-2026:29980). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.26.4-1.el10_2` or later.
|
| RLSA-2026:29874 |
|
Vulnerability in nginx (RLSA-2026:29874)
vulnerability in nginx (RLSA-2026:29874). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:1.26.3-6.el10_2.4` or later.
|
| RLSA-2026:29195 |
|
Vulnerability in buildah (RLSA-2026:29195)
vulnerability in buildah (RLSA-2026:29195). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.43.1-2.el10_2` or later.
|
| RLSA-2026:29702 |
|
Vulnerability in runc (RLSA-2026:29702)
vulnerability in runc (RLSA-2026:29702). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4:1.4.2-2.el9_8` or later.
|
| RLSA-2026:29981 |
|
Vulnerability in golang (RLSA-2026:29981)
vulnerability in golang (RLSA-2026:29981). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.26.4-1.el9_8` or later.
|
| RLSA-2026:29844 |
|
Vulnerability in tigervnc (RLSA-2026:29844)
vulnerability in tigervnc (RLSA-2026:29844). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.15.0-7.el9_8.2` or later.
|
| RLSA-2026:29940 |
|
Vulnerability in thunderbird (RLSA-2026:29940)
vulnerability in thunderbird (RLSA-2026:29940). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:140.12.0-1.el9_8` or later.
|
| RLSA-2026:29703 |
|
Vulnerability in containernetworking-plugins (RLSA-2026:29703)
vulnerability in containernetworking-plugins (RLSA-2026:29703). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:1.9.0-3.el9_8` or later.
|
| RLSA-2026:29455 |
|
Vulnerability in buildah (RLSA-2026:29455)
vulnerability in buildah (RLSA-2026:29455). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.43.1-2.el9_8` or later.
|
| RHSA-2026:30044 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:29952 |
|
Red Hat Security Advisory: compat-poppler022 security update
Red Hat Security Advisory: compat-poppler022 security update
|
| DEBIAN-CVE-2026-57918 |
|
Vulnerability in libnfs (DEBIAN-CVE-2026-57918)
vulnerability in libnfs (DEBIAN-CVE-2026-57918). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-57918 |
|
Vulnerability in libnfs (UBUNTU-CVE-2026-57918)
vulnerability in libnfs (UBUNTU-CVE-2026-57918). Confidential information can be exposed externally.
|
| SUSE-SU-2026:2648-1 |
|
Vulnerability in openssl-3 (SUSE-SU-2026:2648-1)
vulnerability in openssl-3 (SUSE-SU-2026:2648-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-150700.5.36.1` or later.
|
| MAL-2026-6516 |
|
Vulnerability in inlifegram (MAL-2026-6516)
vulnerability in inlifegram (MAL-2026-6516). Risk of unauthorized operations or information disclosure. Exploitable via ``pyrogram``.
|
| SUSE-SU-2026:2647-1 |
|
Vulnerability in nodejs22 (SUSE-SU-2026:2647-1)
vulnerability in nodejs22 (SUSE-SU-2026:2647-1). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`. Mitigation: upgrade to `22.23.0-150600.13.18.1` or later.
|
| UBUNTU-CVE-2026-6658 |
|
Vulnerability in nbconvert (UBUNTU-CVE-2026-6658)
vulnerability in nbconvert (UBUNTU-CVE-2026-6658). Risk of unauthorized operations or information disclosure. Exploitable via ``data_mermaid``.
|
| SUSE-SU-2026:22445-1 |
|
Vulnerability in python-tornado6 (SUSE-SU-2026:22445-1)
vulnerability in python-tornado6 (SUSE-SU-2026:22445-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.4-slfo.1.1_5.1` or later.
|
| CVE-2026-11702 |
|
Vulnerability in CVE-2026-11702 (CVE-2026-11702)
vulnerability in CVE-2026-11702 (CVE-2026-11702). Confidential information can be exposed externally.
|
| CVE-2026-1869 |
|
Vulnerability in wordpress (CVE-2026-1869)
vulnerability in wordpress (CVE-2026-1869). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11625 |
|
Vulnerability in CVE-2026-11625 (CVE-2026-11625)
vulnerability in CVE-2026-11625 (CVE-2026-11625). Confidential information can be exposed externally.
|
| CVE-2026-57880 |
|
Vulnerability in dos (CVE-2026-57880)
vulnerability in dos (CVE-2026-57880). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57881 |
|
Vulnerability in dos (CVE-2026-57881)
vulnerability in dos (CVE-2026-57881). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57877 |
|
Vulnerability in dos (CVE-2026-57877)
vulnerability in dos (CVE-2026-57877). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57878 |
|
Vulnerability in dos (CVE-2026-57878)
vulnerability in dos (CVE-2026-57878). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57879 |
|
Vulnerability in dos (CVE-2026-57879)
vulnerability in dos (CVE-2026-57879). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2053 |
|
SSRF (Server-Side Request Forgery) in wso2 (CVE-2026-2053)
SSRF in wso2 (CVE-2026-2053). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57876 |
|
Out-of-Bounds Write in dos (CVE-2026-57876)
out-of-bounds write in dos (CVE-2026-57876). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57875 |
|
Vulnerability in dos (CVE-2026-57875)
vulnerability in dos (CVE-2026-57875). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57874 |
|
Vulnerability in dos (CVE-2026-57874)
vulnerability in dos (CVE-2026-57874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10835 |
|
Vulnerability in wordpress (CVE-2026-10835)
vulnerability in wordpress (CVE-2026-10835). Confidential information can be exposed externally.
|
| CVE-2026-57872 |
|
Path Traversal in path-traversal (CVE-2026-57872)
path traversal in path-traversal (CVE-2026-57872). Confidential information can be exposed externally.
|
| CVE-2026-8380 |
|
Vulnerability in wordpress (CVE-2026-8380)
vulnerability in wordpress (CVE-2026-8380). Data can be tampered with by attackers.
|
| CVE-2026-49486 |
|
Vulnerability in apache-airflow-providers-ftp (CVE-2026-49486)
vulnerability in apache-airflow-providers-ftp (CVE-2026-49486). Confidential information can be exposed externally. Exploitable via ``ftplib.FTP_TLS``. Mitigation: upgrade to `3.15.1` or later.
|
| CVE-2026-57873 |
|
Vulnerability in dos (CVE-2026-57873)
vulnerability in dos (CVE-2026-57873). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10823 |
|
Vulnerability in wordpress (CVE-2026-10823)
vulnerability in wordpress (CVE-2026-10823). Confidential information can be exposed externally.
|
| CVE-2025-10268 |
|
Vulnerability in wordpress (CVE-2025-10268)
vulnerability in wordpress (CVE-2025-10268). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:21072-1 |
|
Vulnerability in trivy (openSUSE-SU-2026:21072-1)
vulnerability in trivy (openSUSE-SU-2026:21072-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.71.2-160000.1.1` or later.
|
| SUSE-SU-2026:22430-1 |
|
Vulnerability in python-tornado6 (SUSE-SU-2026:22430-1)
vulnerability in python-tornado6 (SUSE-SU-2026:22430-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.4-6.1` or later.
|
| SUSE-SU-2026:22429-1 |
|
Vulnerability in sg3_utils (SUSE-SU-2026:22429-1)
vulnerability in sg3_utils (SUSE-SU-2026:22429-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.48~20221101+2.5a7572d6-1.1` or later.
|
| UBUNTU-CVE-2026-11625 |
|
Vulnerability in libbytes-random-secure-perl (UBUNTU-CVE-2026-11625)
vulnerability in libbytes-random-secure-perl (UBUNTU-CVE-2026-11625). Confidential information can be exposed externally.
|
| openSUSE-SU-2026:21071-1 |
|
Vulnerability in ImageMagick (openSUSE-SU-2026:21071-1)
vulnerability in ImageMagick (openSUSE-SU-2026:21071-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2.0-160000.10.1` or later.
|
| openSUSE-SU-2026:21070-1 |
|
Vulnerability in tar (openSUSE-SU-2026:21070-1)
vulnerability in tar (openSUSE-SU-2026:21070-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35-160000.4.1` or later.
|