Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-20253 |
|
SQL Injection in sqli (CVE-2017-20253)
SQL injection in sqli (CVE-2017-20253). Confidential information can be exposed externally.
|
| CVE-2017-20252 |
|
SQL Injection in sqli (CVE-2017-20252)
SQL injection in sqli (CVE-2017-20252). Confidential information can be exposed externally.
|
| CVE-2017-20255 |
|
SQL Injection in sqli (CVE-2017-20255)
SQL injection in sqli (CVE-2017-20255). Confidential information can be exposed externally.
|
| CVE-2017-20254 |
|
SQL Injection in sqli (CVE-2017-20254)
SQL injection in sqli (CVE-2017-20254). Confidential information can be exposed externally.
|
| CVE-2017-20258 |
|
SQL Injection in sqli (CVE-2017-20258)
SQL injection in sqli (CVE-2017-20258). Confidential information can be exposed externally.
|
| CGA-6fr8-38f7-7rw8 |
|
CGA-6fr8-38f7-7rw8 |
| CVE-2026-49359 |
|
SSRF (Server-Side Request Forgery) in pontedilana/php-weasyprint (CVE-2026-49359)
SSRF in pontedilana/php-weasyprint (CVE-2026-49359). Confidential information can be exposed externally. Exploitable via ``attachment``. Mitigation: upgrade to `2.6.0` or later.
|
| CVE-2026-49290 |
|
Path Traversal in CVE-2026-49290 (CVE-2026-49290)
path traversal in CVE-2026-49290 (CVE-2026-49290). Risk of unauthorized operations or information disclosure. Exploitable via ``zipfile``.
|
| CVE-2026-49287 |
|
Vulnerability in statamic/cms (CVE-2026-49287)
vulnerability in statamic/cms (CVE-2026-49287). Data can be tampered with by attackers. Mitigation: upgrade to `5.73.23` or later.
|
| CVE-2026-49286 |
|
Unsafe Deserialization in pontedilana/php-weasyprint (CVE-2026-49286)
vulnerability in pontedilana/php-weasyprint (CVE-2026-49286). Successful exploitation can lead to full system takeover. Exploitable via ``eb8accc``. Mitigation: upgrade to `2.6.0` or later.
|
| CVE-2026-49271 |
|
Out-of-Bounds Read in struktur (CVE-2026-49271)
vulnerability in struktur (CVE-2026-49271). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-49271 |
|
Vulnerability in libheif (UBUNTU-CVE-2026-49271)
vulnerability in libheif (UBUNTU-CVE-2026-49271). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.21.2-3ubuntu0.2` or later.
|
| GHSA-mqq5-j7w8-2hgh |
|
Vulnerability in alchemy_cms (GHSA-mqq5-j7w8-2hgh)
vulnerability in alchemy_cms (GHSA-mqq5-j7w8-2hgh). Confidential information can be exposed externally. Exploitable via `GET /api/pages/nested`. Mitigation: upgrade to `7.4.15` or later.
|
| GHSA-c3wq-j5vh-68rc |
|
Vulnerability in github.com/gohugoio/hugo (GHSA-c3wq-j5vh-68rc)
vulnerability in github.com/gohugoio/hugo (GHSA-c3wq-j5vh-68rc). Risk of unauthorized operations or information disclosure. Exploitable via ``resources.Get``. Mitigation: upgrade to `0.163.1` or later.
|
| GHSA-q76j-gcg9-vxc6 |
|
Cross-Site Scripting (XSS) in github.com/gohugoio/hugo (GHSA-q76j-gcg9-vxc6)
cross-site scripting in github.com/gohugoio/hugo (GHSA-q76j-gcg9-vxc6). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.163.3` or later.
|
| GHSA-9wxg-vf3r-56hc |
|
Vulnerability in @openzeppelin/wizard (GHSA-9wxg-vf3r-56hc)
vulnerability in @openzeppelin/wizard (GHSA-9wxg-vf3r-56hc). Risk of unauthorized operations or information disclosure. Exploitable via ``info.securityContact``. Mitigation: upgrade to `0.10.11` or later.
|
| GHSA-7qpf-5pm7-57rh |
|
Vulnerability in free-claude (GHSA-7qpf-5pm7-57rh)
vulnerability in free-claude (GHSA-7qpf-5pm7-57rh). Risk of unauthorized operations or information disclosure. Exploitable via ``npx``.
|
| CVE-2026-49260 |
|
OS Command Injection in pontedilana/php-weasyprint (CVE-2026-49260)
OS command injection in pontedilana/php-weasyprint (CVE-2026-49260). Successful exploitation can lead to full system takeover. Exploitable via ``master``. Mitigation: upgrade to `2.5.1` or later.
|
| UBUNTU-CVE-2026-56208 |
|
Vulnerability in aom (UBUNTU-CVE-2026-56208)
vulnerability in aom (UBUNTU-CVE-2026-56208). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-56210 |
|
Vulnerability in aom (UBUNTU-CVE-2026-56210)
vulnerability in aom (UBUNTU-CVE-2026-56210). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-56211 |
|
Vulnerability in aom (UBUNTU-CVE-2026-56211)
vulnerability in aom (UBUNTU-CVE-2026-56211). Data can be tampered with by attackers.
|
| UBUNTU-CVE-2026-56209 |
|
Vulnerability in aom (UBUNTU-CVE-2026-56209)
vulnerability in aom (UBUNTU-CVE-2026-56209). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:21111-1 |
|
Vulnerability in himmelblau (openSUSE-SU-2026:21111-1)
vulnerability in himmelblau (openSUSE-SU-2026:21111-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.11+git1.116c6763-160000.1.1` or later.
|
| openSUSE-SU-2026:21109-1 |
|
Vulnerability in dovecot24 (openSUSE-SU-2026:21109-1)
vulnerability in dovecot24 (openSUSE-SU-2026:21109-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.4-160000.1.1` or later.
|
| SUSE-SU-2026:22185-1 |
|
Vulnerability in dovecot24 (SUSE-SU-2026:22185-1)
vulnerability in dovecot24 (SUSE-SU-2026:22185-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.4-160000.1.1` or later.
|
| openSUSE-SU-2026:21104-1 |
|
Vulnerability in postgresql16 (openSUSE-SU-2026:21104-1)
vulnerability in postgresql16 (openSUSE-SU-2026:21104-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.14-160000.1.1` or later.
|
| SUSE-SU-2026:22186-1 |
|
Vulnerability in himmelblau (SUSE-SU-2026:22186-1)
vulnerability in himmelblau (SUSE-SU-2026:22186-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.11+git1.116c6763-160000.1.1` or later.
|
| openSUSE-SU-2026:21103-1 |
|
Vulnerability in postgresql15 (openSUSE-SU-2026:21103-1)
vulnerability in postgresql15 (openSUSE-SU-2026:21103-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.18-160000.1.1` or later.
|
| SUSE-SU-2026:22184-1 |
|
Vulnerability in postgresql16 (SUSE-SU-2026:22184-1)
vulnerability in postgresql16 (SUSE-SU-2026:22184-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.14-160000.1.1` or later.
|
| SUSE-SU-2026:22183-1 |
|
Vulnerability in postgresql15 (SUSE-SU-2026:22183-1)
vulnerability in postgresql15 (SUSE-SU-2026:22183-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.18-160000.1.1` or later.
|
| SUSE-SU-2026:22182-1 |
|
Vulnerability in papers (SUSE-SU-2026:22182-1)
vulnerability in papers (SUSE-SU-2026:22182-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `48.10-160000.1.1` or later.
|
| openSUSE-SU-2026:21106-1 |
|
Vulnerability in papers (openSUSE-SU-2026:21106-1)
vulnerability in papers (openSUSE-SU-2026:21106-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `48.10-160000.1.1` or later.
|
| MINI-wcwj-3mhh-w2x3 |
|
MINI-wcwj-3mhh-w2x3 |
| MINI-v922-9vj5-q46q |
|
MINI-v922-9vj5-q46q |
| MINI-67h9-fr9h-wxfh |
|
MINI-67h9-fr9h-wxfh |
| MINI-66qw-xvmr-646x |
|
MINI-66qw-xvmr-646x |
| MINI-cxf8-gchf-g7jq |
|
MINI-cxf8-gchf-g7jq |
| MINI-mg8j-vxhp-c6w9 |
|
MINI-mg8j-vxhp-c6w9 |
| MINI-f6fh-2frm-3j6f |
|
MINI-f6fh-2frm-3j6f |
| MINI-9w9r-95fw-j7h9 |
|
MINI-9w9r-95fw-j7h9 |
| MINI-mvjj-2f2v-7g74 |
|
MINI-mvjj-2f2v-7g74 |
| MINI-fwv7-jj44-2fm8 |
|
MINI-fwv7-jj44-2fm8 |
| MINI-4xp5-52wg-2257 |
|
MINI-4xp5-52wg-2257 |
| MINI-fr6x-hwrr-r6p5 |
|
MINI-fr6x-hwrr-r6p5 |
| openSUSE-SU-2026:21108-1 |
|
Vulnerability in ignition (openSUSE-SU-2026:21108-1)
vulnerability in ignition (openSUSE-SU-2026:21108-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.0-160000.4.1` or later.
|
| SUSE-SU-2026:22224-1 |
|
Vulnerability in ignition (SUSE-SU-2026:22224-1)
vulnerability in ignition (SUSE-SU-2026:22224-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.0-160000.4.1` or later.
|
| SUSE-SU-2026:22181-1 |
|
Vulnerability in ignition (SUSE-SU-2026:22181-1)
vulnerability in ignition (SUSE-SU-2026:22181-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.21.0-160000.4.1` or later.
|
| MINI-qj2w-v5fq-pfc4 |
|
MINI-qj2w-v5fq-pfc4 |
| MINI-crg3-vf73-6h3f |
|
MINI-crg3-vf73-6h3f |
| MINI-wjcm-8hgq-gwvh |
|
MINI-wjcm-8hgq-gwvh |