Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2023-45795 Cross-Site Scripting (XSS) in CVE-2023-45795 (CVE-2023-45795)
cross-site scripting in CVE-2023-45795 (CVE-2023-45795). Successful exploitation can lead to full system takeover.
ROOT-APP-MAVEN-CVE-2024-22871 Vulnerability in io.root.org.clojure:clojure (ROOT-APP-MAVEN-CVE-2024-22871)
vulnerability in io.root.org.clojure:clojure (ROOT-APP-MAVEN-CVE-2024-22871). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.0-root.io.1, 1.8.0-root.io.1, 1.7.0-root.io.1` or later.
RHSA-2026:27727 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:27725 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:27724 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:27723 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:27722 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:27721 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:27720 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
MINI-fwhh-grf5-h64v MINI-fwhh-grf5-h64v
MINI-v4x4-mq59-2hq4 MINI-v4x4-mq59-2hq4
SUSE-SU-2026:22313-1 Vulnerability in gsasl (SUSE-SU-2026:22313-1)
vulnerability in gsasl (SUSE-SU-2026:22313-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1-160000.3.1` or later.
CVE-2025-66336 SQL Injection in apache (CVE-2025-66336)
SQL injection in apache (CVE-2025-66336). Confidential information can be exposed externally.
CVE-2026-44913 Vulnerability in nifi (CVE-2026-44913)
vulnerability in nifi (CVE-2026-44913). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.
CVE-2026-44914 Vulnerability in nifi (CVE-2026-44914)
vulnerability in nifi (CVE-2026-44914). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.
CVE-2026-8157 Privilege Escalation in wordpress (CVE-2026-8157)
vulnerability in wordpress (CVE-2026-8157). Successful exploitation can lead to full system takeover.
CVE-2026-44911 Authorization Flaw in nifi (CVE-2026-44911)
vulnerability in nifi (CVE-2026-44911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.0` or later.
CVE-2026-54665 Vulnerability in nifi (CVE-2026-54665)
vulnerability in nifi (CVE-2026-54665). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.0` or later.
CVE-2026-7859 Vulnerability in wordpress (CVE-2026-7859)
vulnerability in wordpress (CVE-2026-7859). Risk of unauthorized operations or information disclosure.
CVE-2025-62198 Vulnerability in apache (CVE-2025-62198)
vulnerability in apache (CVE-2025-62198). Risk of unauthorized operations or information disclosure.
CVE-2026-4259 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4259)
cross-site scripting in wordpress (CVE-2026-4259). Risk of unauthorized operations or information disclosure.
CVE-2026-6858 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6858)
cross-site scripting in wordpress (CVE-2026-6858). Risk of unauthorized operations or information disclosure.
CVE-2026-4110 Vulnerability in wordpress (CVE-2026-4110)
vulnerability in wordpress (CVE-2026-4110). Risk of unauthorized operations or information disclosure.
CVE-2026-10530 Vulnerability in wordpress (CVE-2026-10530)
vulnerability in wordpress (CVE-2026-10530). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:21004-1 Vulnerability in gsasl (openSUSE-SU-2026:21004-1)
vulnerability in gsasl (openSUSE-SU-2026:21004-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1-160000.3.1` or later.
SUSE-SU-2026:22242-1 Vulnerability in google-osconfig-agent (SUSE-SU-2026:22242-1)
vulnerability in google-osconfig-agent (SUSE-SU-2026:22242-1). Risk of unauthorized operations or information disclosure. Exploitable via ``html.ParseFragment``. Mitigation: upgrade to `20260615.01-1.1` or later.
SUSE-SU-2026:22248-1 Vulnerability in libarchive (SUSE-SU-2026:22248-1)
vulnerability in libarchive (SUSE-SU-2026:22248-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.4-slfo.1.1_4.1` or later.
SUSE-SU-2026:22249-1 Vulnerability in google-osconfig-agent (SUSE-SU-2026:22249-1)
vulnerability in google-osconfig-agent (SUSE-SU-2026:22249-1). Risk of unauthorized operations or information disclosure. Exploitable via ``html.ParseFragment``. Mitigation: upgrade to `20260615.01-slfo.1.1_1.1` or later.
SUSE-SU-2026:2478-1 Vulnerability in graphite2 (SUSE-SU-2026:2478-1)
vulnerability in graphite2 (SUSE-SU-2026:2478-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.14-150600.3.3.1` or later.
SUSE-SU-2026:2477-1 Vulnerability in graphite2 (SUSE-SU-2026:2477-1)
vulnerability in graphite2 (SUSE-SU-2026:2477-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.11-150000.4.6.1` or later.
SUSE-SU-2026:2476-1 Vulnerability in openvswitch3 (SUSE-SU-2026:2476-1)
vulnerability in openvswitch3 (SUSE-SU-2026:2476-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.7-150500.3.31.1` or later.
SUSE-SU-2026:2475-1 Vulnerability in openvswitch (SUSE-SU-2026:2475-1)
vulnerability in openvswitch (SUSE-SU-2026:2475-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.7-150600.33.15.1` or later.
MAL-2026-6262 Vulnerability in inversiones-common (MAL-2026-6262)
vulnerability in inversiones-common (MAL-2026-6262). Risk of unauthorized operations or information disclosure. Exploitable via ``uname``.
SUSE-SU-2026:2474-1 Vulnerability in graphite2 (SUSE-SU-2026:2474-1)
vulnerability in graphite2 (SUSE-SU-2026:2474-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.1-10.6.1` or later.
openSUSE-SU-2026:20998-1 Vulnerability in tree-sitter-ruby (openSUSE-SU-2026:20998-1)
vulnerability in tree-sitter-ruby (openSUSE-SU-2026:20998-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.1-160000.3.1` or later.
SUSE-SU-2026:22247-1 Vulnerability in crun (SUSE-SU-2026:22247-1)
vulnerability in crun (SUSE-SU-2026:22247-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15-slfo.1.1_2.1` or later.
RLSA-2026:27354 Vulnerability in kernel-rt (RLSA-2026:27354)
vulnerability in kernel-rt (RLSA-2026:27354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.136.1.rt7.477.el8_10` or later.
ROOT-APP-GOBINARY-CVE-2026-41568 Vulnerability in rootio-github.com/docker/docker (ROOT-APP-GOBINARY-CVE-2026-41568)
vulnerability in rootio-github.com/docker/docker (ROOT-APP-GOBINARY-CVE-2026-41568). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v28.5.2-root.io.7+incompatible` or later.
CVE-2026-6645 Vulnerability in CVE-2026-6645 (CVE-2026-6645)
vulnerability in CVE-2026-6645 (CVE-2026-6645). Risk of unauthorized operations or information disclosure.
CVE-2026-8918 Vulnerability in CVE-2026-8918 (CVE-2026-8918)
vulnerability in CVE-2026-8918 (CVE-2026-8918). Risk of unauthorized operations or information disclosure.
CVE-2026-11748 Vulnerability in CVE-2026-11748 (CVE-2026-11748)
vulnerability in CVE-2026-11748 (CVE-2026-11748). Risk of unauthorized operations or information disclosure.
CVE-2026-11746 Vulnerability in CVE-2026-11746 (CVE-2026-11746)
vulnerability in CVE-2026-11746 (CVE-2026-11746). Risk of unauthorized operations or information disclosure.
CVE-2026-11745 Vulnerability in CVE-2026-11745 (CVE-2026-11745)
vulnerability in CVE-2026-11745 (CVE-2026-11745). Risk of unauthorized operations or information disclosure.
USN-8455-1 Vulnerability in netatalk (USN-8455-1)
vulnerability in netatalk (USN-8455-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.2-1ubuntu2.2+esm4` or later.
CGA-rcv9-c37m-fjw6 CGA-rcv9-c37m-fjw6
CVE-2026-12815 Command Injection in CVE-2026-12815 (CVE-2026-12815)
command injection in CVE-2026-12815 (CVE-2026-12815). Risk of unauthorized operations or information disclosure.
CVE-2026-12822 Vulnerability in langflow (CVE-2026-12822)
vulnerability in langflow (CVE-2026-12822). Risk of unauthorized operations or information disclosure.
CVE-2026-12823 Vulnerability in CVE-2026-12823 (CVE-2026-12823)
vulnerability in CVE-2026-12823 (CVE-2026-12823). Risk of unauthorized operations or information disclosure.
CVE-2026-12821 Path Traversal in path-traversal (CVE-2026-12821)
path traversal in path-traversal (CVE-2026-12821). Risk of unauthorized operations or information disclosure.
CVE-2026-12811 Cross-Site Scripting (XSS) in CVE-2026-12811 (CVE-2026-12811)
cross-site scripting in CVE-2026-12811 (CVE-2026-12811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.8.39` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →