Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55860 |
|
Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55860). Confidential information can be exposed externally. Mitigation: upgrade to `1.4.1` or later.
|
| CVE-2026-55859 |
|
Vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859)
vulnerability in org.mariadb:r2dbc-mariadb (CVE-2026-55859). Data can be tampered with by attackers. Mitigation: upgrade to `1.4.1` or later.
|
| CVE-2026-55858 |
|
Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55858). Data can be tampered with by attackers. Mitigation: upgrade to `2.7.14` or later.
|
| CVE-2026-55857 |
|
Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55857). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
|
| CVE-2026-55856 |
|
Vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856)
vulnerability in org.mariadb.jdbc:mariadb-java-client (CVE-2026-55856). Confidential information can be exposed externally. Mitigation: upgrade to `2.7.14` or later.
|
| CVE-2026-55848 |
|
XXE (XML External Entity) in org.mapfish.print:print-lib (CVE-2026-55848)
vulnerability in org.mapfish.print:print-lib (CVE-2026-55848). Confidential information can be exposed externally. Mitigation: upgrade to `4.0.5` or later.
|
| CVE-2026-55867 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55867)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55867). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2` or later.
|
| CVE-2026-55841 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55841)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55841). Data can be tampered with by attackers. Mitigation: upgrade to `7.1.2` or later.
|
| CVE-2026-55425 |
|
Vulnerability in org.graylog2:graylog2-server (CVE-2026-55425)
vulnerability in org.graylog2:graylog2-server (CVE-2026-55425). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.4` or later.
|
| CVE-2026-55565 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55565)
code injection in org.yamcs:yamcs-core (CVE-2026-55565). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55559 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55559)
code injection in org.yamcs:yamcs-core (CVE-2026-55559). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/instances`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55552 |
|
Path Traversal in org.yamcs:yamcs-core (CVE-2026-55552)
path traversal in org.yamcs:yamcs-core (CVE-2026-55552). Confidential information can be exposed externally. Mitigation: upgrade to `5.12.0` or later.
|
| CVE-2026-55549 |
|
Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55549)
cross-site scripting in org.yamcs:yamcs-core (CVE-2026-55549). Confidential information can be exposed externally. Exploitable via ``fetch``. Mitigation: upgrade to `5.9.4` or later.
|
| CVE-2026-55547 |
|
Vulnerability in org.yamcs:yamcs-core (CVE-2026-55547)
vulnerability in org.yamcs:yamcs-core (CVE-2026-55547). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/roles`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-55511 |
|
Code Injection in org.yamcs:yamcs-core (CVE-2026-55511)
code injection in org.yamcs:yamcs-core (CVE-2026-55511). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/archive/{instance}`. Mitigation: upgrade to `5.12.8` or later.
|
| CVE-2026-82078 |
|
Vulnerability in CVE-2026-82078 (CVE-2026-82078)
vulnerability in CVE-2026-82078 (CVE-2026-82078). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59292 |
|
Vulnerability in CVE-2026-59292 (CVE-2026-59292)
vulnerability in CVE-2026-59292 (CVE-2026-59292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55758 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55758)
SSRF in ssrf (CVE-2026-55758). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59278 |
|
SSRF (Server-Side Request Forgery) in csharp (CVE-2026-59278)
SSRF in csharp (CVE-2026-59278). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47864 |
|
Unsafe Deserialization in deserialization (CVE-2026-47864)
vulnerability in deserialization (CVE-2026-47864). Confidential information can be exposed externally.
|
| CVE-2026-47851 |
|
Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...
Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...
|
| CVE-2026-75331 |
|
Unrestricted File Upload in CVE-2026-75331 (CVE-2026-75331)
vulnerability in CVE-2026-75331 (CVE-2026-75331). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75328 |
|
Path Traversal in CVE-2026-75328 (CVE-2026-75328)
path traversal in CVE-2026-75328 (CVE-2026-75328). Confidential information can be exposed externally.
|
| CVE-2026-75415 |
|
Vulnerability in CVE-2026-75415 (CVE-2026-75415)
vulnerability in CVE-2026-75415 (CVE-2026-75415). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75414 |
|
Vulnerability in CVE-2026-75414 (CVE-2026-75414)
vulnerability in CVE-2026-75414 (CVE-2026-75414). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75327 |
|
Vulnerability in CVE-2026-75327 (CVE-2026-75327)
vulnerability in CVE-2026-75327 (CVE-2026-75327). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71054 |
|
Vulnerability in c (CVE-2026-71054)
vulnerability in c (CVE-2026-71054). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54550 |
|
Path Traversal in org.codehaus.izpack:izpack-installer (CVE-2026-54550)
path traversal in org.codehaus.izpack:izpack-installer (CVE-2026-54550). Data can be tampered with by attackers. Exploitable via ``targetPath``.
|
| CVE-2026-38469 |
|
Vulnerability in CVE-2026-38469 (CVE-2026-38469)
vulnerability in CVE-2026-38469 (CVE-2026-38469). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79675 |
|
Vulnerability in CVE-2026-79675 (CVE-2026-79675)
vulnerability in CVE-2026-79675 (CVE-2026-79675). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77310 |
|
SSRF (Server-Side Request Forgery) in csharp (CVE-2026-77310)
SSRF in csharp (CVE-2026-77310). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78323 |
|
Vulnerability in CVE-2026-78323 (CVE-2026-78323)
vulnerability in CVE-2026-78323 (CVE-2026-78323). Confidential information can be exposed externally.
|
| CVE-2026-78166 |
|
Vulnerability in CVE-2026-78166 (CVE-2026-78166)
vulnerability in CVE-2026-78166 (CVE-2026-78166). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78140 |
|
Vulnerability in CVE-2026-78140 (CVE-2026-78140)
vulnerability in CVE-2026-78140 (CVE-2026-78140). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62243 |
|
Vulnerability in CVE-2026-62243 (CVE-2026-62243)
vulnerability in CVE-2026-62243 (CVE-2026-62243). Confidential information can be exposed externally. Mitigation: upgrade to `4.2.17.Final` or later.
|
| CVE-2026-76904 |
|
SQL Injection in org.geotools.jdbc:gt-jdbc-postgis (CVE-2026-76904)
SQL injection in org.geotools.jdbc:gt-jdbc-postgis (CVE-2026-76904). Successful exploitation can lead to full system takeover. Exploitable via ``jsonArrayContains``. Mitigation: upgrade to `33.6` or later.
|
| CVE-2026-63490 |
|
Path Traversal in CVE-2026-63490 (CVE-2026-63490)
path traversal in CVE-2026-63490 (CVE-2026-63490). Confidential information can be exposed externally.
|
| CVE-2026-76576 |
|
Path Traversal in vue (CVE-2026-76576)
path traversal in vue (CVE-2026-76576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75596 |
|
Vulnerability in CVE-2026-75596 (CVE-2026-75596)
vulnerability in CVE-2026-75596 (CVE-2026-75596). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76224 |
|
Code Injection in CVE-2026-76224 (CVE-2026-76224)
code injection in CVE-2026-76224 (CVE-2026-76224). Successful exploitation can lead to full system takeover.
|
| CVE-2026-75987 |
|
Vulnerability in deserialization (CVE-2026-75987)
vulnerability in deserialization (CVE-2026-75987). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75979 |
|
Vulnerability in CVE-2026-75979 (CVE-2026-75979)
vulnerability in CVE-2026-75979 (CVE-2026-75979). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75978 |
|
Vulnerability in c (CVE-2026-75978)
vulnerability in c (CVE-2026-75978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70906 |
|
Vulnerability in c (CVE-2026-70906)
vulnerability in c (CVE-2026-70906). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70907 |
|
Vulnerability in c (CVE-2026-70907)
vulnerability in c (CVE-2026-70907). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70681 |
|
Vulnerability in c (CVE-2026-70681)
vulnerability in c (CVE-2026-70681). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61308 |
|
Vulnerability in c (CVE-2026-61308)
vulnerability in c (CVE-2026-61308). Confidential information can be exposed externally.
|
| CVE-2026-60589 |
|
Information Disclosure in c (CVE-2026-60589)
vulnerability in c (CVE-2026-60589). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75935 |
|
Vulnerability in Amazon aws (CVE-2026-75935)
vulnerability in Amazon aws (CVE-2026-75935). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75936 |
|
Vulnerability in dos (CVE-2026-75936)
vulnerability in dos (CVE-2026-75936). Risk of unauthorized operations or information disclosure.
|