Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2017-20253 SQL Injection in sqli (CVE-2017-20253)
SQL injection in sqli (CVE-2017-20253). Confidential information can be exposed externally.
CVE-2017-20252 SQL Injection in sqli (CVE-2017-20252)
SQL injection in sqli (CVE-2017-20252). Confidential information can be exposed externally.
CVE-2017-20255 SQL Injection in sqli (CVE-2017-20255)
SQL injection in sqli (CVE-2017-20255). Confidential information can be exposed externally.
CVE-2017-20254 SQL Injection in sqli (CVE-2017-20254)
SQL injection in sqli (CVE-2017-20254). Confidential information can be exposed externally.
CVE-2017-20258 SQL Injection in sqli (CVE-2017-20258)
SQL injection in sqli (CVE-2017-20258). Confidential information can be exposed externally.
CGA-6fr8-38f7-7rw8 CGA-6fr8-38f7-7rw8
CVE-2026-49359 SSRF (Server-Side Request Forgery) in pontedilana/php-weasyprint (CVE-2026-49359)
SSRF in pontedilana/php-weasyprint (CVE-2026-49359). Confidential information can be exposed externally. Exploitable via ``attachment``. Mitigation: upgrade to `2.6.0` or later.
CVE-2026-49290 Path Traversal in CVE-2026-49290 (CVE-2026-49290)
path traversal in CVE-2026-49290 (CVE-2026-49290). Risk of unauthorized operations or information disclosure. Exploitable via ``zipfile``.
CVE-2026-49287 Vulnerability in statamic/cms (CVE-2026-49287)
vulnerability in statamic/cms (CVE-2026-49287). Data can be tampered with by attackers. Mitigation: upgrade to `5.73.23` or later.
CVE-2026-49286 Unsafe Deserialization in pontedilana/php-weasyprint (CVE-2026-49286)
vulnerability in pontedilana/php-weasyprint (CVE-2026-49286). Successful exploitation can lead to full system takeover. Exploitable via ``eb8accc``. Mitigation: upgrade to `2.6.0` or later.
CVE-2026-49271 Out-of-Bounds Read in struktur (CVE-2026-49271)
vulnerability in struktur (CVE-2026-49271). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-49271 Vulnerability in libheif (UBUNTU-CVE-2026-49271)
vulnerability in libheif (UBUNTU-CVE-2026-49271). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.21.2-3ubuntu0.2` or later.
GHSA-mqq5-j7w8-2hgh Vulnerability in alchemy_cms (GHSA-mqq5-j7w8-2hgh)
vulnerability in alchemy_cms (GHSA-mqq5-j7w8-2hgh). Confidential information can be exposed externally. Exploitable via `GET /api/pages/nested`. Mitigation: upgrade to `7.4.15` or later.
GHSA-c3wq-j5vh-68rc Vulnerability in github.com/gohugoio/hugo (GHSA-c3wq-j5vh-68rc)
vulnerability in github.com/gohugoio/hugo (GHSA-c3wq-j5vh-68rc). Risk of unauthorized operations or information disclosure. Exploitable via ``resources.Get``. Mitigation: upgrade to `0.163.1` or later.
GHSA-q76j-gcg9-vxc6 Cross-Site Scripting (XSS) in github.com/gohugoio/hugo (GHSA-q76j-gcg9-vxc6)
cross-site scripting in github.com/gohugoio/hugo (GHSA-q76j-gcg9-vxc6). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.163.3` or later.
GHSA-9wxg-vf3r-56hc Vulnerability in @openzeppelin/wizard (GHSA-9wxg-vf3r-56hc)
vulnerability in @openzeppelin/wizard (GHSA-9wxg-vf3r-56hc). Risk of unauthorized operations or information disclosure. Exploitable via ``info.securityContact``. Mitigation: upgrade to `0.10.11` or later.
GHSA-7qpf-5pm7-57rh Vulnerability in free-claude (GHSA-7qpf-5pm7-57rh)
vulnerability in free-claude (GHSA-7qpf-5pm7-57rh). Risk of unauthorized operations or information disclosure. Exploitable via ``npx``.
CVE-2026-49260 OS Command Injection in pontedilana/php-weasyprint (CVE-2026-49260)
OS command injection in pontedilana/php-weasyprint (CVE-2026-49260). Successful exploitation can lead to full system takeover. Exploitable via ``master``. Mitigation: upgrade to `2.5.1` or later.
UBUNTU-CVE-2026-56208 Vulnerability in aom (UBUNTU-CVE-2026-56208)
vulnerability in aom (UBUNTU-CVE-2026-56208). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-56210 Vulnerability in aom (UBUNTU-CVE-2026-56210)
vulnerability in aom (UBUNTU-CVE-2026-56210). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-56211 Vulnerability in aom (UBUNTU-CVE-2026-56211)
vulnerability in aom (UBUNTU-CVE-2026-56211). Data can be tampered with by attackers.
UBUNTU-CVE-2026-56209 Vulnerability in aom (UBUNTU-CVE-2026-56209)
vulnerability in aom (UBUNTU-CVE-2026-56209). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:21111-1 Vulnerability in himmelblau (openSUSE-SU-2026:21111-1)
vulnerability in himmelblau (openSUSE-SU-2026:21111-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.11+git1.116c6763-160000.1.1` or later.
openSUSE-SU-2026:21109-1 Vulnerability in dovecot24 (openSUSE-SU-2026:21109-1)
vulnerability in dovecot24 (openSUSE-SU-2026:21109-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.4-160000.1.1` or later.
SUSE-SU-2026:22185-1 Vulnerability in dovecot24 (SUSE-SU-2026:22185-1)
vulnerability in dovecot24 (SUSE-SU-2026:22185-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.4-160000.1.1` or later.
openSUSE-SU-2026:21104-1 Vulnerability in postgresql16 (openSUSE-SU-2026:21104-1)
vulnerability in postgresql16 (openSUSE-SU-2026:21104-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.14-160000.1.1` or later.
SUSE-SU-2026:22186-1 Vulnerability in himmelblau (SUSE-SU-2026:22186-1)
vulnerability in himmelblau (SUSE-SU-2026:22186-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.11+git1.116c6763-160000.1.1` or later.
openSUSE-SU-2026:21103-1 Vulnerability in postgresql15 (openSUSE-SU-2026:21103-1)
vulnerability in postgresql15 (openSUSE-SU-2026:21103-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.18-160000.1.1` or later.
SUSE-SU-2026:22184-1 Vulnerability in postgresql16 (SUSE-SU-2026:22184-1)
vulnerability in postgresql16 (SUSE-SU-2026:22184-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.14-160000.1.1` or later.
SUSE-SU-2026:22183-1 Vulnerability in postgresql15 (SUSE-SU-2026:22183-1)
vulnerability in postgresql15 (SUSE-SU-2026:22183-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.18-160000.1.1` or later.
SUSE-SU-2026:22182-1 Vulnerability in papers (SUSE-SU-2026:22182-1)
vulnerability in papers (SUSE-SU-2026:22182-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `48.10-160000.1.1` or later.
openSUSE-SU-2026:21106-1 Vulnerability in papers (openSUSE-SU-2026:21106-1)
vulnerability in papers (openSUSE-SU-2026:21106-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `48.10-160000.1.1` or later.
MINI-wcwj-3mhh-w2x3 MINI-wcwj-3mhh-w2x3
MINI-v922-9vj5-q46q MINI-v922-9vj5-q46q
MINI-67h9-fr9h-wxfh MINI-67h9-fr9h-wxfh
MINI-66qw-xvmr-646x MINI-66qw-xvmr-646x
MINI-cxf8-gchf-g7jq MINI-cxf8-gchf-g7jq
MINI-mg8j-vxhp-c6w9 MINI-mg8j-vxhp-c6w9
MINI-f6fh-2frm-3j6f MINI-f6fh-2frm-3j6f
MINI-9w9r-95fw-j7h9 MINI-9w9r-95fw-j7h9
MINI-mvjj-2f2v-7g74 MINI-mvjj-2f2v-7g74
MINI-fwv7-jj44-2fm8 MINI-fwv7-jj44-2fm8
MINI-4xp5-52wg-2257 MINI-4xp5-52wg-2257
MINI-fr6x-hwrr-r6p5 MINI-fr6x-hwrr-r6p5
openSUSE-SU-2026:21108-1 Vulnerability in ignition (openSUSE-SU-2026:21108-1)
vulnerability in ignition (openSUSE-SU-2026:21108-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.0-160000.4.1` or later.
SUSE-SU-2026:22224-1 Vulnerability in ignition (SUSE-SU-2026:22224-1)
vulnerability in ignition (SUSE-SU-2026:22224-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.0-160000.4.1` or later.
SUSE-SU-2026:22181-1 Vulnerability in ignition (SUSE-SU-2026:22181-1)
vulnerability in ignition (SUSE-SU-2026:22181-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.0-160000.4.1` or later.
MINI-qj2w-v5fq-pfc4 MINI-qj2w-v5fq-pfc4
MINI-crg3-vf73-6h3f MINI-crg3-vf73-6h3f
MINI-wjcm-8hgq-gwvh MINI-wjcm-8hgq-gwvh

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →