Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82473 |
|
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without...
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without...
|
| CVE-2026-18141 |
|
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven...
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven...
|
| CVE-2026-16328 |
|
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address...
In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address...
|
| CVE-2026-63308 |
|
Vulnerability in dos (CVE-2026-63308)
vulnerability in dos (CVE-2026-63308). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8609 |
|
Vulnerability in dos (CVE-2026-8609)
vulnerability in dos (CVE-2026-8609). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8595 |
|
Cross-Site Scripting (XSS) in grafana (CVE-2026-8595)
cross-site scripting in grafana (CVE-2026-8595). Confidential information can be exposed externally.
|
| CVE-2026-33382 |
|
Vulnerability in dos (CVE-2026-33382)
vulnerability in dos (CVE-2026-33382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28378 |
|
Vulnerability in grafana (CVE-2026-28378)
vulnerability in grafana (CVE-2026-28378). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13020 |
|
Vulnerability in esri (CVE-2026-13020)
vulnerability in esri (CVE-2026-13020). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13019 |
|
Vulnerability in esri (CVE-2026-13019)
vulnerability in esri (CVE-2026-13019). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57306 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57306)
vulnerability in csrf (CVE-2026-57306). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57299 |
|
Vulnerability in jenkins (CVE-2026-57299)
vulnerability in jenkins (CVE-2026-57299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57300 |
|
Vulnerability in jenkins (CVE-2026-57300)
vulnerability in jenkins (CVE-2026-57300). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57301 |
|
Vulnerability in jenkins (CVE-2026-57301)
vulnerability in jenkins (CVE-2026-57301). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57302 |
|
Vulnerability in jenkins (CVE-2026-57302)
vulnerability in jenkins (CVE-2026-57302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57303 |
|
SSRF (Server-Side Request Forgery) in jenkins (CVE-2026-57303)
SSRF in jenkins (CVE-2026-57303). Confidential information can be exposed externally.
|
| CVE-2026-57304 |
|
Vulnerability in jenkins (CVE-2026-57304)
vulnerability in jenkins (CVE-2026-57304). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57305 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57305)
vulnerability in csrf (CVE-2026-57305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57307 |
|
Vulnerability in jenkins (CVE-2026-57307)
vulnerability in jenkins (CVE-2026-57307). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57297 |
|
Vulnerability in jenkins (CVE-2026-57297)
vulnerability in jenkins (CVE-2026-57297). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57295 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57295)
vulnerability in csrf (CVE-2026-57295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57294 |
|
Vulnerability in jenkins (CVE-2026-57294)
vulnerability in jenkins (CVE-2026-57294). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57290 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57290)
vulnerability in csrf (CVE-2026-57290). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57289 |
|
Vulnerability in jenkins (CVE-2026-57289)
vulnerability in jenkins (CVE-2026-57289). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57288 |
|
Vulnerability in jenkins (CVE-2026-57288)
vulnerability in jenkins (CVE-2026-57288). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57287 |
|
Vulnerability in jenkins (CVE-2026-57287)
vulnerability in jenkins (CVE-2026-57287). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57286 |
|
Vulnerability in jenkins (CVE-2026-57286)
vulnerability in jenkins (CVE-2026-57286). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57285 |
|
Vulnerability in jenkins (CVE-2026-57285)
vulnerability in jenkins (CVE-2026-57285). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57284 |
|
Vulnerability in jenkins (CVE-2026-57284)
vulnerability in jenkins (CVE-2026-57284). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57283 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-57283)
vulnerability in csrf (CVE-2026-57283). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57282 |
|
OS Command Injection in jenkins (CVE-2026-57282)
OS command injection in jenkins (CVE-2026-57282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57281 |
|
Vulnerability in jenkins (CVE-2026-57281)
vulnerability in jenkins (CVE-2026-57281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57280 |
|
Vulnerability in jenkins (CVE-2026-57280)
vulnerability in jenkins (CVE-2026-57280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42127 |
|
Vulnerability in dos (CVE-2026-42127)
vulnerability in dos (CVE-2026-42127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9029 |
|
The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug....
The geomap panel's XYZ tile layer has a sanitize-then-interpolate ordering bug....
|
| CVE-2026-42129 |
|
The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An...
The Loki datasource plugin's callResource handler contains a path traversal vulnerability. An...
|
| CVE-2026-28381 |
|
Vulnerability in grafana (CVE-2026-28381)
vulnerability in grafana (CVE-2026-28381). Confidential information can be exposed externally.
|
| CVE-2026-10601 |
|
Path Traversal in path-traversal (CVE-2026-10601)
path traversal in path-traversal (CVE-2026-10601). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27878 |
|
Vulnerability in github.com/grafana/tempo (CVE-2026-27878)
vulnerability in github.com/grafana/tempo (CVE-2026-27878). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.1-0.20260303204923-b13f74291d48` or later.
|
| CVE-2026-11769 |
|
Information Disclosure in github.com/grafana/grafana-operator (CVE-2026-11769)
vulnerability in github.com/grafana/grafana-operator (CVE-2026-11769). Successful exploitation can lead to full system takeover. Exploitable via ``Dashboard``. Mitigation: upgrade to `5.24.0` or later.
|
| CVE-2026-53441 |
|
Cross-Site Scripting (XSS) in org.jenkins-ci.main:jenkins-core (CVE-2026-53441)
cross-site scripting in org.jenkins-ci.main:jenkins-core (CVE-2026-53441). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.568` or later.
|
| CVE-2026-53442 |
|
Vulnerability in jenkins (CVE-2026-53442)
vulnerability in jenkins (CVE-2026-53442). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-53435 |
|
Unsafe Deserialization in jenkins (CVE-2026-53435)
vulnerability in jenkins (CVE-2026-53435). Successful exploitation can lead to full system takeover. Exploitable via ``config.xml``. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-53436 |
|
Open Redirect in jenkins (CVE-2026-53436)
vulnerability in jenkins (CVE-2026-53436). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-53437 |
|
Open Redirect in jenkins (CVE-2026-53437)
vulnerability in jenkins (CVE-2026-53437). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-53439 |
|
Vulnerability in jenkins (CVE-2026-53439)
vulnerability in jenkins (CVE-2026-53439). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-53440 |
|
Open Redirect in jenkins (CVE-2026-53440)
vulnerability in jenkins (CVE-2026-53440). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-53438 |
|
Vulnerability in jenkins (CVE-2026-53438)
vulnerability in jenkins (CVE-2026-53438). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.555.3, 2.568.0` or later.
|
| CVE-2026-9674 |
|
Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674)
vulnerability in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `669.v9d96a` or later.
|
| CVE-2026-48924 |
|
Open Redirect in org.jenkins-ci.plugins:bitbucket-oauth (CVE-2026-48924)
vulnerability in org.jenkins-ci.plugins:bitbucket-oauth (CVE-2026-48924). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.18` or later.
|