Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ALSA-2026:22715 |
|
Vulnerability in expat (ALSA-2026:22715)
vulnerability in expat (ALSA-2026:22715). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.3-1.el10_2.1` or later.
|
| ALSA-2026:22717 |
|
Vulnerability in vim-X11 (ALSA-2026:22717)
vulnerability in vim-X11 (ALSA-2026:22717). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-26.el9_8.5` or later.
|
| ALSA-2026:22730 |
|
Vulnerability in vim-X11 (ALSA-2026:22730)
vulnerability in vim-X11 (ALSA-2026:22730). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.0.1763-23.el8_10` or later.
|
| openSUSE-SU-2026:10951-1 |
|
Vulnerability in perl-Net-CIDR-Set (openSUSE-SU-2026:10951-1)
vulnerability in perl-Net-CIDR-Set (openSUSE-SU-2026:10951-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.210.0-1.1` or later.
|
| openSUSE-SU-2026:10952-1 |
|
Vulnerability in sshfs (openSUSE-SU-2026:10952-1)
vulnerability in sshfs (openSUSE-SU-2026:10952-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.6-1.1` or later.
|
| openSUSE-SU-2026:10950-1 |
|
Vulnerability in perl-Cpanel-JSON-XS (openSUSE-SU-2026:10950-1)
vulnerability in perl-Cpanel-JSON-XS (openSUSE-SU-2026:10950-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.410.0-1.1` or later.
|
| openSUSE-SU-2026:10949-1 |
|
Vulnerability in git-bug (openSUSE-SU-2026:10949-1)
vulnerability in git-bug (openSUSE-SU-2026:10949-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.1-5.1` or later.
|
| openSUSE-SU-2026:10948-1 |
|
Vulnerability in freerdp (openSUSE-SU-2026:10948-1)
vulnerability in freerdp (openSUSE-SU-2026:10948-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.26.0-3.1` or later.
|
| openSUSE-SU-2026:10946-1 |
|
Vulnerability in assimp (openSUSE-SU-2026:10946-1)
vulnerability in assimp (openSUSE-SU-2026:10946-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.5-3.1` or later.
|
| openSUSE-SU-2026:10947-1 |
|
Vulnerability in erlang27 (openSUSE-SU-2026:10947-1)
vulnerability in erlang27 (openSUSE-SU-2026:10947-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `27.1.3-2.1` or later.
|
| openSUSE-SU-2026:10944-1 |
|
Vulnerability in ansible-13 (openSUSE-SU-2026:10944-1)
vulnerability in ansible-13 (openSUSE-SU-2026:10944-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13.7.0-1.1` or later.
|
| openSUSE-SU-2026:10945-1 |
|
Vulnerability in ansible-core-2.20 (openSUSE-SU-2026:10945-1)
vulnerability in ansible-core-2.20 (openSUSE-SU-2026:10945-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.20.6-1.1` or later.
|
| openSUSE-SU-2026:10943-1 |
|
Vulnerability in amazon-ssm-agent (openSUSE-SU-2026:10943-1)
vulnerability in amazon-ssm-agent (openSUSE-SU-2026:10943-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.4624.0-1.1` or later.
|
| openSUSE-SU-2026:10942-1 |
|
Vulnerability in 7zip (openSUSE-SU-2026:10942-1)
vulnerability in 7zip (openSUSE-SU-2026:10942-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01-1.1` or later.
|
| ALSA-2026:22711 |
|
Vulnerability in vim-X11 (ALSA-2026:22711)
vulnerability in vim-X11 (ALSA-2026:22711). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:9.1.083-9.el10_2.3` or later.
|
| ALSA-2026:22721 |
|
Vulnerability in expat (ALSA-2026:22721)
vulnerability in expat (ALSA-2026:22721). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.0-2.el8_10` or later.
|
| UBUNTU-CVE-2026-5422 |
|
Vulnerability in jupyter-server (UBUNTU-CVE-2026-5422)
vulnerability in jupyter-server (UBUNTU-CVE-2026-5422). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-5385 |
|
Vulnerability in glpi (UBUNTU-CVE-2026-5385)
vulnerability in glpi (UBUNTU-CVE-2026-5385). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-50031 |
|
Vulnerability in freeipmi (UBUNTU-CVE-2026-50031)
vulnerability in freeipmi (UBUNTU-CVE-2026-50031). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-49943 |
|
Vulnerability in bird (UBUNTU-CVE-2026-49943)
vulnerability in bird (UBUNTU-CVE-2026-49943). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-50052 |
|
Vulnerability in varnish (UBUNTU-CVE-2026-50052)
vulnerability in varnish (UBUNTU-CVE-2026-50052). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-48682 |
|
Vulnerability in fastnetmon (UBUNTU-CVE-2026-48682)
vulnerability in fastnetmon (UBUNTU-CVE-2026-48682). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-47265 |
|
Vulnerability in python-aiohttp (UBUNTU-CVE-2026-47265)
vulnerability in python-aiohttp (UBUNTU-CVE-2026-47265). Confidential information can be exposed externally. Exploitable via ``cookies``.
|
| UBUNTU-CVE-2026-42504 |
|
Vulnerability in golang-1.24 (UBUNTU-CVE-2026-42504)
vulnerability in golang-1.24 (UBUNTU-CVE-2026-42504). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-42507 |
|
Vulnerability in golang-1.24 (UBUNTU-CVE-2026-42507)
vulnerability in golang-1.24 (UBUNTU-CVE-2026-42507). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-38978 |
|
Vulnerability in transmission (UBUNTU-CVE-2026-38978)
vulnerability in transmission (UBUNTU-CVE-2026-38978). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.00-2ubuntu2.2` or later.
|
| UBUNTU-CVE-2026-40108 |
|
Vulnerability in glpi (UBUNTU-CVE-2026-40108)
vulnerability in glpi (UBUNTU-CVE-2026-40108). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-34993 |
|
Vulnerability in python-aiohttp (UBUNTU-CVE-2026-34993)
vulnerability in python-aiohttp (UBUNTU-CVE-2026-34993). Data can be tampered with by attackers.
|
| UBUNTU-CVE-2026-27145 |
|
Vulnerability in golang-1.24 (UBUNTU-CVE-2026-27145)
vulnerability in golang-1.24 (UBUNTU-CVE-2026-27145). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-10702 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-10702)
vulnerability in mozjs52 (UBUNTU-CVE-2026-10702). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-10705 |
|
Vulnerability in dask (UBUNTU-CVE-2026-10705)
vulnerability in dask (UBUNTU-CVE-2026-10705). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-10701 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-10701)
vulnerability in mozjs52 (UBUNTU-CVE-2026-10701). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-10650 |
|
Vulnerability in libwebsockets (UBUNTU-CVE-2026-10650)
vulnerability in libwebsockets (UBUNTU-CVE-2026-10650). Risk of unauthorized operations or information disclosure.
|
| CVE-2010-0249 KEV |
|
[KEV] Use-After-Free in Microsoft internet-explorer (CVE-2010-0249)
vulnerability in Microsoft internet-explorer (CVE-2010-0249). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CGA-fxgm-4x24-xcgf |
|
CGA-fxgm-4x24-xcgf |
| CGA-6579-fj5c-vx4p |
|
CGA-6579-fj5c-vx4p |
| DEBIAN-CVE-2026-42507 |
|
Vulnerability in golang-1.15 (DEBIAN-CVE-2026-42507)
vulnerability in golang-1.15 (DEBIAN-CVE-2026-42507). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.11-1` or later.
|
| CVE-2026-44654 |
|
Authorization Flaw in librechat (CVE-2026-44654)
vulnerability in librechat (CVE-2026-44654). Data can be tampered with by attackers. Exploitable via `DELETE /api/files`.
|
| CVE-2026-44653 |
|
Vulnerability in librechat (CVE-2026-44653)
vulnerability in librechat (CVE-2026-44653). Confidential information can be exposed externally. Exploitable via `GET /api/mcp/servers`.
|
| DEBIAN-CVE-2026-42504 |
|
Vulnerability in golang-1.15 (DEBIAN-CVE-2026-42504)
vulnerability in golang-1.15 (DEBIAN-CVE-2026-42504). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.11-1` or later.
|
| CVE-2026-41412 |
|
Path Traversal in CVE-2026-41412 (CVE-2026-41412)
path traversal in CVE-2026-41412 (CVE-2026-41412). Confidential information can be exposed externally. Exploitable via ``simpleHttpClient``.
|
| CVE-2026-40108 |
|
Cross-Site Scripting (XSS) in CVE-2026-40108 (CVE-2026-40108)
cross-site scripting in CVE-2026-40108 (CVE-2026-40108). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35482 |
|
Authorization Flaw in alf (CVE-2026-35482)
vulnerability in alf (CVE-2026-35482). Successful exploitation can lead to full system takeover. Exploitable via ``returnClass``.
|
| DEBIAN-CVE-2026-27145 |
|
Vulnerability in golang-1.15 (DEBIAN-CVE-2026-27145)
vulnerability in golang-1.15 (DEBIAN-CVE-2026-27145). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.11-1` or later.
|
| CVE-2026-32625 |
|
Information Disclosure in librechat (CVE-2026-32625)
vulnerability in librechat (CVE-2026-32625). Confidential information can be exposed externally.
|
| CVE-2026-31942 |
|
Vulnerability in librechat (CVE-2026-31942)
vulnerability in librechat (CVE-2026-31942). Data can be tampered with by attackers. Exploitable via `PUT /api/keys`.
|
| SUSE-SU-2026:22024-1 |
|
Vulnerability in python-CairoSVG (SUSE-SU-2026:22024-1)
vulnerability in python-CairoSVG (SUSE-SU-2026:22024-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.7.1-160000.3.1` or later.
|
| openSUSE-SU-2026:20886-1 |
|
Vulnerability in openSUSE-SU-2026:20886-1 (openSUSE-SU-2026:20886-1)
vulnerability in openSUSE-SU-2026:20886-1 (openSUSE-SU-2026:20886-1). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8936 |
|
Vulnerability in CVE-2026-8936 (CVE-2026-8936)
vulnerability in CVE-2026-8936 (CVE-2026-8936). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-10650 |
|
Vulnerability in libwebsockets (DEBIAN-CVE-2026-10650)
vulnerability in libwebsockets (DEBIAN-CVE-2026-10650). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.5-5` or later.
|