Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-45795 |
|
Cross-Site Scripting (XSS) in CVE-2023-45795 (CVE-2023-45795)
cross-site scripting in CVE-2023-45795 (CVE-2023-45795). Successful exploitation can lead to full system takeover.
|
| ROOT-APP-MAVEN-CVE-2024-22871 |
|
Vulnerability in io.root.org.clojure:clojure (ROOT-APP-MAVEN-CVE-2024-22871)
vulnerability in io.root.org.clojure:clojure (ROOT-APP-MAVEN-CVE-2024-22871). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.0-root.io.1, 1.8.0-root.io.1, 1.7.0-root.io.1` or later.
|
| RHSA-2026:27727 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:27725 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:27724 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:27723 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:27722 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:27721 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| RHSA-2026:27720 |
|
Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
|
| MINI-fwhh-grf5-h64v |
|
MINI-fwhh-grf5-h64v |
| MINI-v4x4-mq59-2hq4 |
|
MINI-v4x4-mq59-2hq4 |
| SUSE-SU-2026:22313-1 |
|
Vulnerability in gsasl (SUSE-SU-2026:22313-1)
vulnerability in gsasl (SUSE-SU-2026:22313-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1-160000.3.1` or later.
|
| CVE-2025-66336 |
|
SQL Injection in apache (CVE-2025-66336)
SQL injection in apache (CVE-2025-66336). Confidential information can be exposed externally.
|
| CVE-2026-44913 |
|
Vulnerability in nifi (CVE-2026-44913)
vulnerability in nifi (CVE-2026-44913). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.
|
| CVE-2026-44914 |
|
Vulnerability in nifi (CVE-2026-44914)
vulnerability in nifi (CVE-2026-44914). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.10.0` or later.
|
| CVE-2026-8157 |
|
Privilege Escalation in wordpress (CVE-2026-8157)
vulnerability in wordpress (CVE-2026-8157). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44911 |
|
Authorization Flaw in nifi (CVE-2026-44911)
vulnerability in nifi (CVE-2026-44911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.10.0` or later.
|
| CVE-2026-54665 |
|
Vulnerability in nifi (CVE-2026-54665)
vulnerability in nifi (CVE-2026-54665). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.0` or later.
|
| CVE-2026-7859 |
|
Vulnerability in wordpress (CVE-2026-7859)
vulnerability in wordpress (CVE-2026-7859). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62198 |
|
Vulnerability in apache (CVE-2025-62198)
vulnerability in apache (CVE-2025-62198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4259 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-4259)
cross-site scripting in wordpress (CVE-2026-4259). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6858 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-6858)
cross-site scripting in wordpress (CVE-2026-6858). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4110 |
|
Vulnerability in wordpress (CVE-2026-4110)
vulnerability in wordpress (CVE-2026-4110). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10530 |
|
Vulnerability in wordpress (CVE-2026-10530)
vulnerability in wordpress (CVE-2026-10530). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:21004-1 |
|
Vulnerability in gsasl (openSUSE-SU-2026:21004-1)
vulnerability in gsasl (openSUSE-SU-2026:21004-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1-160000.3.1` or later.
|
| SUSE-SU-2026:22242-1 |
|
Vulnerability in google-osconfig-agent (SUSE-SU-2026:22242-1)
vulnerability in google-osconfig-agent (SUSE-SU-2026:22242-1). Risk of unauthorized operations or information disclosure. Exploitable via ``html.ParseFragment``. Mitigation: upgrade to `20260615.01-1.1` or later.
|
| SUSE-SU-2026:22248-1 |
|
Vulnerability in libarchive (SUSE-SU-2026:22248-1)
vulnerability in libarchive (SUSE-SU-2026:22248-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.4-slfo.1.1_4.1` or later.
|
| SUSE-SU-2026:22249-1 |
|
Vulnerability in google-osconfig-agent (SUSE-SU-2026:22249-1)
vulnerability in google-osconfig-agent (SUSE-SU-2026:22249-1). Risk of unauthorized operations or information disclosure. Exploitable via ``html.ParseFragment``. Mitigation: upgrade to `20260615.01-slfo.1.1_1.1` or later.
|
| SUSE-SU-2026:2478-1 |
|
Vulnerability in graphite2 (SUSE-SU-2026:2478-1)
vulnerability in graphite2 (SUSE-SU-2026:2478-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.14-150600.3.3.1` or later.
|
| SUSE-SU-2026:2477-1 |
|
Vulnerability in graphite2 (SUSE-SU-2026:2477-1)
vulnerability in graphite2 (SUSE-SU-2026:2477-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.11-150000.4.6.1` or later.
|
| SUSE-SU-2026:2476-1 |
|
Vulnerability in openvswitch3 (SUSE-SU-2026:2476-1)
vulnerability in openvswitch3 (SUSE-SU-2026:2476-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.7-150500.3.31.1` or later.
|
| SUSE-SU-2026:2475-1 |
|
Vulnerability in openvswitch (SUSE-SU-2026:2475-1)
vulnerability in openvswitch (SUSE-SU-2026:2475-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.7-150600.33.15.1` or later.
|
| MAL-2026-6262 |
|
Vulnerability in inversiones-common (MAL-2026-6262)
vulnerability in inversiones-common (MAL-2026-6262). Risk of unauthorized operations or information disclosure. Exploitable via ``uname``.
|
| SUSE-SU-2026:2474-1 |
|
Vulnerability in graphite2 (SUSE-SU-2026:2474-1)
vulnerability in graphite2 (SUSE-SU-2026:2474-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.1-10.6.1` or later.
|
| openSUSE-SU-2026:20998-1 |
|
Vulnerability in tree-sitter-ruby (openSUSE-SU-2026:20998-1)
vulnerability in tree-sitter-ruby (openSUSE-SU-2026:20998-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.1-160000.3.1` or later.
|
| SUSE-SU-2026:22247-1 |
|
Vulnerability in crun (SUSE-SU-2026:22247-1)
vulnerability in crun (SUSE-SU-2026:22247-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15-slfo.1.1_2.1` or later.
|
| RLSA-2026:27354 |
|
Vulnerability in kernel-rt (RLSA-2026:27354)
vulnerability in kernel-rt (RLSA-2026:27354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.136.1.rt7.477.el8_10` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-41568 |
|
Vulnerability in rootio-github.com/docker/docker (ROOT-APP-GOBINARY-CVE-2026-41568)
vulnerability in rootio-github.com/docker/docker (ROOT-APP-GOBINARY-CVE-2026-41568). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v28.5.2-root.io.7+incompatible` or later.
|
| CVE-2026-6645 |
|
Vulnerability in CVE-2026-6645 (CVE-2026-6645)
vulnerability in CVE-2026-6645 (CVE-2026-6645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8918 |
|
Vulnerability in CVE-2026-8918 (CVE-2026-8918)
vulnerability in CVE-2026-8918 (CVE-2026-8918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11748 |
|
Vulnerability in CVE-2026-11748 (CVE-2026-11748)
vulnerability in CVE-2026-11748 (CVE-2026-11748). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11746 |
|
Vulnerability in CVE-2026-11746 (CVE-2026-11746)
vulnerability in CVE-2026-11746 (CVE-2026-11746). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11745 |
|
Vulnerability in CVE-2026-11745 (CVE-2026-11745)
vulnerability in CVE-2026-11745 (CVE-2026-11745). Risk of unauthorized operations or information disclosure.
|
| USN-8455-1 |
|
Vulnerability in netatalk (USN-8455-1)
vulnerability in netatalk (USN-8455-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.2-1ubuntu2.2+esm4` or later.
|
| CGA-rcv9-c37m-fjw6 |
|
CGA-rcv9-c37m-fjw6 |
| CVE-2026-12815 |
|
Command Injection in CVE-2026-12815 (CVE-2026-12815)
command injection in CVE-2026-12815 (CVE-2026-12815). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12822 |
|
Vulnerability in langflow (CVE-2026-12822)
vulnerability in langflow (CVE-2026-12822). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12823 |
|
Vulnerability in CVE-2026-12823 (CVE-2026-12823)
vulnerability in CVE-2026-12823 (CVE-2026-12823). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12821 |
|
Path Traversal in path-traversal (CVE-2026-12821)
path traversal in path-traversal (CVE-2026-12821). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12811 |
|
Cross-Site Scripting (XSS) in CVE-2026-12811 (CVE-2026-12811)
cross-site scripting in CVE-2026-12811 (CVE-2026-12811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.8.39` or later.
|