Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| OESA-2026-2485 |
|
Vulnerability in buildah (OESA-2026-2485)
vulnerability in buildah (OESA-2026-2485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.34.1-12.oe2403sp1` or later.
|
| OESA-2026-2484 |
|
Vulnerability in buildah (OESA-2026-2484)
vulnerability in buildah (OESA-2026-2484). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.34.1-12.oe2403` or later.
|
| OESA-2026-2483 |
|
Vulnerability in hplip (OESA-2026-2483)
vulnerability in hplip (OESA-2026-2483). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.26.4-1.oe2403sp3` or later.
|
| OESA-2026-2482 |
|
Vulnerability in wireshark (OESA-2026-2482)
vulnerability in wireshark (OESA-2026-2482). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.16-1.oe2403sp1` or later.
|
| OESA-2026-2481 |
|
Vulnerability in wireshark (OESA-2026-2481)
vulnerability in wireshark (OESA-2026-2481). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.16-1.oe2403` or later.
|
| OESA-2026-2480 |
|
Vulnerability in lwip (OESA-2026-2480)
vulnerability in lwip (OESA-2026-2480). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.0-76.oe2403sp3` or later.
|
| OESA-2026-2479 |
|
Vulnerability in postgresql (OESA-2026-2479)
vulnerability in postgresql (OESA-2026-2479). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.18-1.oe2403sp1` or later.
|
| OESA-2026-2478 |
|
Vulnerability in sed (OESA-2026-2478)
vulnerability in sed (OESA-2026-2478). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.8-8.oe2003sp4` or later.
|
| OESA-2026-2477 |
|
Vulnerability in curl (OESA-2026-2477)
vulnerability in curl (OESA-2026-2477). Risk of unauthorized operations or information disclosure. Exploitable via ``proxyA``. Mitigation: upgrade to `8.4.0-30.oe2403sp1` or later.
|
| OESA-2026-2476 |
|
Vulnerability in vim (OESA-2026-2476)
vulnerability in vim (OESA-2026-2476). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
|
| OESA-2026-2475 |
|
Vulnerability in vim (OESA-2026-2475)
vulnerability in vim (OESA-2026-2475). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
|
| OESA-2026-2474 |
|
Vulnerability in vim (OESA-2026-2474)
vulnerability in vim (OESA-2026-2474). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
|
| OESA-2026-2473 |
|
Vulnerability in vim (OESA-2026-2473)
vulnerability in vim (OESA-2026-2473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
|
| OESA-2026-2472 |
|
Vulnerability in vim (OESA-2026-2472)
vulnerability in vim (OESA-2026-2472). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
|
| OESA-2026-2471 |
|
Vulnerability in qt5-qtbase (OESA-2026-2471)
vulnerability in qt5-qtbase (OESA-2026-2471). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.10-15.oe2403` or later.
|
| OESA-2026-2470 |
|
Vulnerability in qt5-qtbase (OESA-2026-2470)
vulnerability in qt5-qtbase (OESA-2026-2470). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.2-19.oe2203sp4` or later.
|
| OESA-2026-2468 |
|
Vulnerability in qt5-qtbase (OESA-2026-2468)
vulnerability in qt5-qtbase (OESA-2026-2468). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.10-15.oe2403sp1` or later.
|
| OESA-2026-2469 |
|
Vulnerability in qt5-qtbase (OESA-2026-2469)
vulnerability in qt5-qtbase (OESA-2026-2469). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.10-15.oe2403sp3` or later.
|
| OESA-2026-2467 |
|
Vulnerability in libsolv (OESA-2026-2467)
vulnerability in libsolv (OESA-2026-2467). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``. Mitigation: upgrade to `0.7.22-4.oe2203sp4` or later.
|
| OESA-2026-2466 |
|
Vulnerability in libsolv (OESA-2026-2466)
vulnerability in libsolv (OESA-2026-2466). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``. Mitigation: upgrade to `0.7.14-9.oe2003sp4` or later.
|
| OESA-2026-2465 |
|
Vulnerability in firefox (OESA-2026-2465)
vulnerability in firefox (OESA-2026-2465). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `140.11.0-1.oe2403sp1` or later.
|
| OESA-2026-2464 |
|
Vulnerability in perl-libwww-perl (OESA-2026-2464)
vulnerability in perl-libwww-perl (OESA-2026-2464). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.66-2.oe2203sp4` or later.
|
| OESA-2026-2463 |
|
Vulnerability in ImageMagick (OESA-2026-2463)
vulnerability in ImageMagick (OESA-2026-2463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2.23-1.oe2403sp1` or later.
|
| CVE-2026-9509 |
|
Vulnerability in dos (CVE-2026-9509)
vulnerability in dos (CVE-2026-9509). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9508 |
|
Vulnerability in nginx (CVE-2026-9508)
vulnerability in nginx (CVE-2026-9508). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8326 |
|
Vulnerability in path-traversal (CVE-2026-8326)
vulnerability in path-traversal (CVE-2026-8326). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49324 |
|
Vulnerability in CVE-2026-49324 (CVE-2026-49324)
vulnerability in CVE-2026-49324 (CVE-2026-49324). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49323 |
|
Vulnerability in CVE-2026-49323 (CVE-2026-49323)
vulnerability in CVE-2026-49323 (CVE-2026-49323). Confidential information can be exposed externally.
|
| CVE-2026-45611 |
|
Rejected reason: Further research determined the issue is not a vulnerability.
Rejected reason: Further research determined the issue is not a vulnerability.
|
| CVE-2026-45551 |
|
Cross-Site Scripting (XSS) in CVE-2026-45551 (CVE-2026-45551)
cross-site scripting in CVE-2026-45551 (CVE-2026-45551). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.0.25` or later.
|
| CVE-2026-45312 |
|
Vulnerability in CVE-2026-45312 (CVE-2026-45312)
vulnerability in CVE-2026-45312 (CVE-2026-45312). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45043 |
|
Privilege Escalation in privilege-escalation (CVE-2026-45043)
vulnerability in privilege-escalation (CVE-2026-45043). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /rustfs/admin/v3/import-iam`. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| CVE-2026-10071 |
|
Unrestricted File Upload in CVE-2026-10071 (CVE-2026-10071)
vulnerability in CVE-2026-10071 (CVE-2026-10071). Successful exploitation can lead to full system takeover.
|
| DEBIAN-CVE-2026-48998 |
|
Vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-48998)
vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-48998). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.2` or later.
|
| DEBIAN-CVE-2026-48111 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48111)
vulnerability in 7zip (DEBIAN-CVE-2026-48111). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| DEBIAN-CVE-2026-48103 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48103)
vulnerability in 7zip (DEBIAN-CVE-2026-48103). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| DEBIAN-CVE-2026-48112 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48112)
vulnerability in 7zip (DEBIAN-CVE-2026-48112). Confidential information can be exposed externally. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| DEBIAN-CVE-2026-48104 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48104)
vulnerability in 7zip (DEBIAN-CVE-2026-48104). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| DEBIAN-CVE-2026-49214 |
|
Vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-49214)
vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-49214). Risk of unauthorized operations or information disclosure. Exploitable via ``Uri``. Mitigation: upgrade to `2.10.2` or later.
|
| DEBIAN-CVE-2024-13745 |
|
DEBIAN-CVE-2024-13745 |
| DEBIAN-CVE-2026-48101 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48101)
vulnerability in 7zip (DEBIAN-CVE-2026-48101). Confidential information can be exposed externally. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| DEBIAN-CVE-2026-48092 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48092)
vulnerability in 7zip (DEBIAN-CVE-2026-48092). Confidential information can be exposed externally. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| DEBIAN-CVE-2026-48102 |
|
Vulnerability in 7zip (DEBIAN-CVE-2026-48102)
vulnerability in 7zip (DEBIAN-CVE-2026-48102). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
|
| CVE-2025-41280 |
|
Vulnerability in path-traversal (CVE-2025-41280)
vulnerability in path-traversal (CVE-2025-41280). Successful exploitation can lead to full system takeover.
|
| CVE-2025-41279 |
|
OS Command Injection in waterfall-security (CVE-2025-41279)
OS command injection in waterfall-security (CVE-2025-41279). Successful exploitation can lead to full system takeover.
|
| CVE-2025-41278 |
|
Out-of-Bounds Read in waterfall-security (CVE-2025-41278)
vulnerability in waterfall-security (CVE-2025-41278). Successful exploitation can lead to full system takeover.
|
| CVE-2025-41281 |
|
OS Command Injection in waterfall-security (CVE-2025-41281)
OS command injection in waterfall-security (CVE-2025-41281). Successful exploitation can lead to full system takeover.
|
| CVE-2025-41276 |
|
OS Command Injection in waterfall-security (CVE-2025-41276)
OS command injection in waterfall-security (CVE-2025-41276). Successful exploitation can lead to full system takeover.
|
| CVE-2025-41273 |
|
Vulnerability in waterfall-security (CVE-2025-41273)
vulnerability in waterfall-security (CVE-2025-41273). Successful exploitation can lead to full system takeover.
|
| CVE-2025-41277 |
|
OS Command Injection in waterfall-security (CVE-2025-41277)
OS command injection in waterfall-security (CVE-2025-41277). Successful exploitation can lead to full system takeover.
|