Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| DEBIAN-CVE-2026-8404 |
|
Vulnerability in python-django (DEBIAN-CVE-2026-8404)
vulnerability in python-django (DEBIAN-CVE-2026-8404). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-7666 |
|
Vulnerability in python-django (DEBIAN-CVE-2026-7666)
vulnerability in python-django (DEBIAN-CVE-2026-7666). Risk of unauthorized operations or information disclosure. Exploitable via ``STARTTLS``.
|
| CVE-2026-8404 |
|
Vulnerability in django (CVE-2026-8404)
vulnerability in django (CVE-2026-8404). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-7666 |
|
Vulnerability in django (CVE-2026-7666)
vulnerability in django (CVE-2026-7666). Risk of unauthorized operations or information disclosure. Exploitable via ``STARTTLS``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| DEBIAN-CVE-2026-6873 |
|
Vulnerability in python-django (DEBIAN-CVE-2026-6873)
vulnerability in python-django (DEBIAN-CVE-2026-6873). Risk of unauthorized operations or information disclosure. Exploitable via ``django.http.HttpRequest.get_signed_cookie``.
|
| CVE-2026-6873 |
|
Vulnerability in django (CVE-2026-6873)
vulnerability in django (CVE-2026-6873). Risk of unauthorized operations or information disclosure. Exploitable via ``django.http.HttpRequest.get_signed_cookie``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-5241 |
|
Vulnerability in transformers (CVE-2026-5241)
vulnerability in transformers (CVE-2026-5241). Successful exploitation can lead to full system takeover. Exploitable via ``trust_remote_code``. Mitigation: upgrade to `5.5.0` or later.
|
| DEBIAN-CVE-2026-48587 |
|
Vulnerability in python-django (DEBIAN-CVE-2026-48587)
vulnerability in python-django (DEBIAN-CVE-2026-48587). Risk of unauthorized operations or information disclosure. Exploitable via ``Vary``.
|
| CVE-2026-48587 |
|
Vulnerability in django (CVE-2026-48587)
vulnerability in django (CVE-2026-48587). Risk of unauthorized operations or information disclosure. Exploitable via ``Vary``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-47325 |
|
Vulnerability in CVE-2026-47325 (CVE-2026-47325)
vulnerability in CVE-2026-47325 (CVE-2026-47325). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47324 |
|
Cross-Site Scripting (XSS) in CVE-2026-47324 (CVE-2026-47324)
cross-site scripting in CVE-2026-47324 (CVE-2026-47324). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-44546 |
|
Vulnerability in python-daphne (DEBIAN-CVE-2026-44546)
vulnerability in python-daphne (DEBIAN-CVE-2026-44546). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-44545 |
|
Vulnerability in python-daphne (DEBIAN-CVE-2026-44545)
vulnerability in python-daphne (DEBIAN-CVE-2026-44545). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44546 |
|
Vulnerability in daphne (CVE-2026-44546)
vulnerability in daphne (CVE-2026-44546). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.2` or later.
|
| CVE-2026-44545 |
|
Vulnerability in daphne (CVE-2026-44545)
vulnerability in daphne (CVE-2026-44545). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.2` or later.
|
| DEBIAN-CVE-2026-37460 |
|
Vulnerability in frr (DEBIAN-CVE-2026-37460)
vulnerability in frr (DEBIAN-CVE-2026-37460). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.6.1-1` or later.
|
| CVE-2026-37460 |
|
Vulnerability in c (CVE-2026-37460)
vulnerability in c (CVE-2026-37460). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-35193 |
|
Vulnerability in python-django (DEBIAN-CVE-2026-35193)
vulnerability in python-django (DEBIAN-CVE-2026-35193). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``.
|
| CVE-2026-35193 |
|
Vulnerability in django (CVE-2026-35193)
vulnerability in django (CVE-2026-35193). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `5.2.15, 6.0.6` or later.
|
| CVE-2026-10729 |
|
Vulnerability in CVE-2026-10729 (CVE-2026-10729)
vulnerability in CVE-2026-10729 (CVE-2026-10729). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2025-60477 |
|
Vulnerability in gpac (DEBIAN-CVE-2025-60477)
vulnerability in gpac (DEBIAN-CVE-2025-60477). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-70101 |
|
Out-of-Bounds Read in c (CVE-2025-70101)
vulnerability in c (CVE-2025-70101). Confidential information can be exposed externally.
|
| CVE-2025-70100 |
|
Vulnerability in c (CVE-2025-70100)
vulnerability in c (CVE-2025-70100). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60477 |
|
Vulnerability in c (CVE-2025-60477)
vulnerability in c (CVE-2025-60477). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-47273 |
|
Path Traversal in path-traversal (CVE-2024-47273)
path traversal in path-traversal (CVE-2024-47273). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-47263 |
|
Path Traversal in path-traversal (CVE-2024-47263)
path traversal in path-traversal (CVE-2024-47263). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-52951 |
|
Vulnerability in synology (CVE-2023-52951)
vulnerability in synology (CVE-2023-52951). Confidential information can be exposed externally.
|
| CVE-2022-49042 |
|
Vulnerability in synology (CVE-2022-49042)
vulnerability in synology (CVE-2022-49042). Successful exploitation can lead to full system takeover.
|
| SUSE-SU-2026:2252-1 |
|
Vulnerability in SUSE-SU-2026:2252-1 (SUSE-SU-2026:2252-1)
vulnerability in SUSE-SU-2026:2252-1 (SUSE-SU-2026:2252-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ansible.playbooks``.
|
| CVE-2022-49036 |
|
Vulnerability in synology (CVE-2022-49036)
vulnerability in synology (CVE-2022-49036). Successful exploitation can lead to full system takeover.
|
| SUSE-SU-2026:2244-1 |
|
Vulnerability in SUSE-SU-2026:2244-1 (SUSE-SU-2026:2244-1)
vulnerability in SUSE-SU-2026:2244-1 (SUSE-SU-2026:2244-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ansible.playbooks``.
|
| SUSE-SU-2026:2243-1 |
|
Vulnerability in SUSE-SU-2026:2243-1 (SUSE-SU-2026:2243-1)
vulnerability in SUSE-SU-2026:2243-1 (SUSE-SU-2026:2243-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2242-1 |
|
Vulnerability in SUSE-SU-2026:2242-1 (SUSE-SU-2026:2242-1)
vulnerability in SUSE-SU-2026:2242-1 (SUSE-SU-2026:2242-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ansible.playbooks``.
|
| USN-8380-1 |
|
Vulnerability in twisted (USN-8380-1)
vulnerability in twisted (USN-8380-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.1.0-2ubuntu2.7` or later.
|
| MINI-j3r6-4r5c-9vj6 |
|
MINI-j3r6-4r5c-9vj6 |
| SUSE-SU-2026:2241-1 |
|
Vulnerability in SUSE-SU-2026:2241-1 (SUSE-SU-2026:2241-1)
vulnerability in SUSE-SU-2026:2241-1 (SUSE-SU-2026:2241-1). Risk of unauthorized operations or information disclosure.
|
| MINI-5cm5-frh8-2xcv |
|
MINI-5cm5-frh8-2xcv |
| MINI-78c8-q7j9-f9jr |
|
MINI-78c8-q7j9-f9jr |
| USN-8379-1 |
|
Vulnerability in python-urllib3 (USN-8379-1)
vulnerability in python-urllib3 (USN-8379-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.5-1~exp1ubuntu0.7` or later.
|
| MAL-2026-5176 |
|
Vulnerability in internal-tracker (MAL-2026-5176)
vulnerability in internal-tracker (MAL-2026-5176). Risk of unauthorized operations or information disclosure.
|
| GHSA-69hx-wrc9-h5wq |
|
Vulnerability in webpack-json (GHSA-69hx-wrc9-h5wq)
vulnerability in webpack-json (GHSA-69hx-wrc9-h5wq). Risk of unauthorized operations or information disclosure.
|
| GHSA-pqxq-jw84-3x8f |
|
Vulnerability in nodemon-pack (GHSA-pqxq-jw84-3x8f)
vulnerability in nodemon-pack (GHSA-pqxq-jw84-3x8f). Risk of unauthorized operations or information disclosure.
|
| USN-8378-1 |
|
Vulnerability in libwww-perl (USN-8378-1)
vulnerability in libwww-perl (USN-8378-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.61-1ubuntu0.1` or later.
|
| CVE-2026-9648 |
|
Vulnerability in crypton-x509-validation (CVE-2026-9648)
vulnerability in crypton-x509-validation (CVE-2026-9648). Confidential information can be exposed externally. Mitigation: upgrade to `1.9.1` or later.
|
| USN-8377-1 |
|
Vulnerability in libtemplate-perl (USN-8377-1)
vulnerability in libtemplate-perl (USN-8377-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.27-1ubuntu0.22.04.1` or later.
|
| MINI-r4qq-w3rj-g872 |
|
MINI-r4qq-w3rj-g872 |
| CVE-2026-35085 |
|
Vulnerability in mbs-solutions (CVE-2026-35085)
vulnerability in mbs-solutions (CVE-2026-35085). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35084 |
|
Vulnerability in mbs-solutions (CVE-2026-35084)
vulnerability in mbs-solutions (CVE-2026-35084). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35083 |
|
Vulnerability in mbs-solutions (CVE-2026-35083)
vulnerability in mbs-solutions (CVE-2026-35083). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35082 |
|
Path Traversal in mbs-solutions (CVE-2026-35082)
path traversal in mbs-solutions (CVE-2026-35082). Successful exploitation can lead to full system takeover.
|