Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-42579 |
|
Vulnerability in io.netty:netty-codec-dns (CVE-2026-42579)
vulnerability in io.netty:netty-codec-dns (CVE-2026-42579). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.codec.dns.DnsCodecUtil``. Mitigation: upgrade to `4.1.133.Final` or later.
|
| CVE-2026-42583 |
|
Vulnerability in io.netty:netty-codec-compression (CVE-2026-42583)
vulnerability in io.netty:netty-codec-compression (CVE-2026-42583). Risk of unauthorized operations or information disclosure. Exploitable via ``decompressedLength``. Mitigation: upgrade to `4.2.13.Final` or later.
|
| CVE-2026-41132 |
|
Vulnerability in ckan (CVE-2026-41132)
vulnerability in ckan (CVE-2026-41132). Confidential information can be exposed externally. Mitigation: upgrade to `2.10.10` or later.
|
| CVE-2026-33583 |
|
Vulnerability in CVE-2026-33583 (CVE-2026-33583)
vulnerability in CVE-2026-33583 (CVE-2026-33583). Confidential information can be exposed externally.
|
| CVE-2026-30905 |
|
Vulnerability in zoom (CVE-2026-30905)
vulnerability in zoom (CVE-2026-30905). Successful exploitation can lead to full system takeover.
|
| CVE-2026-30906 |
|
Vulnerability in zoom (CVE-2026-30906)
vulnerability in zoom (CVE-2026-30906). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5773 |
|
SSRF (Server-Side Request Forgery) in haxx (CVE-2026-5773)
SSRF in haxx (CVE-2026-5773). Confidential information can be exposed externally.
|
| CVE-2026-6276 |
|
Vulnerability in haxx (CVE-2026-6276)
vulnerability in haxx (CVE-2026-6276). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44004 |
|
Vulnerability in vm2 (CVE-2026-44004)
vulnerability in vm2 (CVE-2026-44004). Risk of unauthorized operations or information disclosure. Exploitable via ``Buffer.alloc``. Mitigation: upgrade to `3.11.0` or later.
|
| CVE-2026-43998 |
|
Vulnerability in vm2 (CVE-2026-43998)
vulnerability in vm2 (CVE-2026-43998). Successful exploitation can lead to full system takeover. Exploitable via ``require.root``. Mitigation: upgrade to `3.11.0` or later.
|
| CVE-2026-44001 |
|
Vulnerability in vm2 (CVE-2026-44001)
vulnerability in vm2 (CVE-2026-44001). Risk of unauthorized operations or information disclosure. Exploitable via ``onRejected``. Mitigation: upgrade to `3.11.0` or later.
|
| CVE-2026-6281 |
|
OS Command Injection in CVE-2026-6281 (CVE-2026-6281)
OS command injection in CVE-2026-6281 (CVE-2026-6281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6282 |
|
Path Traversal in CVE-2026-6282 (CVE-2026-6282)
path traversal in CVE-2026-6282 (CVE-2026-6282). Confidential information can be exposed externally.
|
| CVE-2026-44470 |
|
Vulnerability in privilege-escalation (CVE-2026-44470)
vulnerability in privilege-escalation (CVE-2026-44470). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3834.0` or later.
|
| CVE-2026-43481 |
|
Vulnerability in linux (CVE-2026-43481)
vulnerability in linux (CVE-2026-43481). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42945 |
|
Vulnerability in nginx (CVE-2026-42945)
vulnerability in nginx (CVE-2026-42945). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.30.1` or later.
|
| CVE-2026-43476 |
|
Vulnerability in linux (CVE-2026-43476)
vulnerability in linux (CVE-2026-43476). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42924 |
|
OS Command Injection in privilege-escalation (CVE-2026-42924)
OS command injection in privilege-escalation (CVE-2026-42924). Confidential information can be exposed externally.
|
| CVE-2026-42930 |
|
Vulnerability in f5 (CVE-2026-42930)
vulnerability in f5 (CVE-2026-42930). Confidential information can be exposed externally.
|
| CVE-2026-42920 |
|
Vulnerability in f5 (CVE-2026-42920)
vulnerability in f5 (CVE-2026-42920). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42266 |
|
Vulnerability in jupyterlab (CVE-2026-42266)
vulnerability in jupyterlab (CVE-2026-42266). Successful exploitation can lead to full system takeover. Exploitable via ``allowed_extensions_uris``. Mitigation: upgrade to `4.5.7` or later.
|
| CVE-2026-42406 |
|
Vulnerability in f5 (CVE-2026-42406)
vulnerability in f5 (CVE-2026-42406). Confidential information can be exposed externally.
|
| CVE-2026-42409 |
|
Vulnerability in f5 (CVE-2026-42409)
vulnerability in f5 (CVE-2026-42409). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41953 |
|
Command Injection in privilege-escalation (CVE-2026-41953)
command injection in privilege-escalation (CVE-2026-41953). Confidential information can be exposed externally.
|
| CVE-2026-41956 |
|
Vulnerability in f5 (CVE-2026-41956)
vulnerability in f5 (CVE-2026-41956). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41957 |
|
Unsafe Deserialization in f5 (CVE-2026-41957)
vulnerability in f5 (CVE-2026-41957). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41218 |
|
Use-After-Free in f5 (CVE-2026-41218)
vulnerability in f5 (CVE-2026-41218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41227 |
|
Vulnerability in dos (CVE-2026-41227)
vulnerability in dos (CVE-2026-41227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41217 |
|
Vulnerability in f5 (CVE-2026-41217)
vulnerability in f5 (CVE-2026-41217). Confidential information can be exposed externally.
|
| CVE-2026-40629 |
|
Vulnerability in f5 (CVE-2026-40629)
vulnerability in f5 (CVE-2026-40629). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40618 |
|
Vulnerability in f5 (CVE-2026-40618)
vulnerability in f5 (CVE-2026-40618). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40631 |
|
Vulnerability in privilege-escalation (CVE-2026-40631)
vulnerability in privilege-escalation (CVE-2026-40631). Confidential information can be exposed externally.
|
| CVE-2026-40698 |
|
Command Injection in privilege-escalation (CVE-2026-40698)
command injection in privilege-escalation (CVE-2026-40698). Confidential information can be exposed externally.
|
| CVE-2026-40060 |
|
Vulnerability in f5 (CVE-2026-40060)
vulnerability in f5 (CVE-2026-40060). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40061 |
|
Command Injection in f5 (CVE-2026-40061)
command injection in f5 (CVE-2026-40061). Confidential information can be exposed externally.
|
| CVE-2026-40067 |
|
Vulnerability in f5 (CVE-2026-40067)
vulnerability in f5 (CVE-2026-40067). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40423 |
|
Vulnerability in f5 (CVE-2026-40423)
vulnerability in f5 (CVE-2026-40423). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39455 |
|
Vulnerability in f5 (CVE-2026-39455)
vulnerability in f5 (CVE-2026-39455). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39458 |
|
Vulnerability in f5 (CVE-2026-39458)
vulnerability in f5 (CVE-2026-39458). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39459 |
|
Vulnerability in f5 (CVE-2026-39459)
vulnerability in f5 (CVE-2026-39459). Successful exploitation can lead to full system takeover.
|
| CVE-2026-36741 |
|
Command Injection in u-speed (CVE-2026-36741)
command injection in u-speed (CVE-2026-36741). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32643 |
|
Vulnerability in f5 (CVE-2026-32643)
vulnerability in f5 (CVE-2026-32643). Confidential information can be exposed externally.
|
| CVE-2026-32673 |
|
Vulnerability in f5 (CVE-2026-32673)
vulnerability in f5 (CVE-2026-32673). Confidential information can be exposed externally.
|
| CVE-2026-34176 |
|
OS Command Injection in f5 (CVE-2026-34176)
OS command injection in f5 (CVE-2026-34176). Confidential information can be exposed externally.
|
| CVE-2026-20916 |
|
Path Traversal in f5 (CVE-2026-20916)
path traversal in f5 (CVE-2026-20916). Data can be tampered with by attackers.
|
| CVE-2025-28344 |
|
striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack.
striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack.
|
| CVE-2025-28343 |
|
striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons.
striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons.
|
| CVE-2020-37226 |
|
SQL Injection in sqli (CVE-2020-37226)
SQL injection in sqli (CVE-2020-37226). Confidential information can be exposed externally.
|
| CVE-2024-55045 |
|
Vulnerability in c (CVE-2024-55045)
vulnerability in c (CVE-2024-55045). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-37218 |
|
SQL Injection in sqli (CVE-2020-37218)
SQL injection in sqli (CVE-2020-37218). Confidential information can be exposed externally.
|