Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
OESA-2026-2485 Vulnerability in buildah (OESA-2026-2485)
vulnerability in buildah (OESA-2026-2485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.34.1-12.oe2403sp1` or later.
OESA-2026-2484 Vulnerability in buildah (OESA-2026-2484)
vulnerability in buildah (OESA-2026-2484). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.34.1-12.oe2403` or later.
OESA-2026-2483 Vulnerability in hplip (OESA-2026-2483)
vulnerability in hplip (OESA-2026-2483). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.26.4-1.oe2403sp3` or later.
OESA-2026-2482 Vulnerability in wireshark (OESA-2026-2482)
vulnerability in wireshark (OESA-2026-2482). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.16-1.oe2403sp1` or later.
OESA-2026-2481 Vulnerability in wireshark (OESA-2026-2481)
vulnerability in wireshark (OESA-2026-2481). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.16-1.oe2403` or later.
OESA-2026-2480 Vulnerability in lwip (OESA-2026-2480)
vulnerability in lwip (OESA-2026-2480). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.0-76.oe2403sp3` or later.
OESA-2026-2479 Vulnerability in postgresql (OESA-2026-2479)
vulnerability in postgresql (OESA-2026-2479). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `15.18-1.oe2403sp1` or later.
OESA-2026-2478 Vulnerability in sed (OESA-2026-2478)
vulnerability in sed (OESA-2026-2478). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.8-8.oe2003sp4` or later.
OESA-2026-2477 Vulnerability in curl (OESA-2026-2477)
vulnerability in curl (OESA-2026-2477). Risk of unauthorized operations or information disclosure. Exploitable via ``proxyA``. Mitigation: upgrade to `8.4.0-30.oe2403sp1` or later.
OESA-2026-2476 Vulnerability in vim (OESA-2026-2476)
vulnerability in vim (OESA-2026-2476). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
OESA-2026-2475 Vulnerability in vim (OESA-2026-2475)
vulnerability in vim (OESA-2026-2475). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
OESA-2026-2474 Vulnerability in vim (OESA-2026-2474)
vulnerability in vim (OESA-2026-2474). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
OESA-2026-2473 Vulnerability in vim (OESA-2026-2473)
vulnerability in vim (OESA-2026-2473). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
OESA-2026-2472 Vulnerability in vim (OESA-2026-2472)
vulnerability in vim (OESA-2026-2472). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.2.0479` or later.
OESA-2026-2471 Vulnerability in qt5-qtbase (OESA-2026-2471)
vulnerability in qt5-qtbase (OESA-2026-2471). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.10-15.oe2403` or later.
OESA-2026-2470 Vulnerability in qt5-qtbase (OESA-2026-2470)
vulnerability in qt5-qtbase (OESA-2026-2470). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.2-19.oe2203sp4` or later.
OESA-2026-2468 Vulnerability in qt5-qtbase (OESA-2026-2468)
vulnerability in qt5-qtbase (OESA-2026-2468). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.10-15.oe2403sp1` or later.
OESA-2026-2469 Vulnerability in qt5-qtbase (OESA-2026-2469)
vulnerability in qt5-qtbase (OESA-2026-2469). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.10-15.oe2403sp3` or later.
OESA-2026-2467 Vulnerability in libsolv (OESA-2026-2467)
vulnerability in libsolv (OESA-2026-2467). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``. Mitigation: upgrade to `0.7.22-4.oe2203sp4` or later.
OESA-2026-2466 Vulnerability in libsolv (OESA-2026-2466)
vulnerability in libsolv (OESA-2026-2466). Risk of unauthorized operations or information disclosure. Exploitable via ``repo_add_solv``. Mitigation: upgrade to `0.7.14-9.oe2003sp4` or later.
OESA-2026-2465 Vulnerability in firefox (OESA-2026-2465)
vulnerability in firefox (OESA-2026-2465). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `140.11.0-1.oe2403sp1` or later.
OESA-2026-2464 Vulnerability in perl-libwww-perl (OESA-2026-2464)
vulnerability in perl-libwww-perl (OESA-2026-2464). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.66-2.oe2203sp4` or later.
OESA-2026-2463 Vulnerability in ImageMagick (OESA-2026-2463)
vulnerability in ImageMagick (OESA-2026-2463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2.23-1.oe2403sp1` or later.
CVE-2026-9509 Vulnerability in dos (CVE-2026-9509)
vulnerability in dos (CVE-2026-9509). Risk of unauthorized operations or information disclosure.
CVE-2026-9508 Vulnerability in nginx (CVE-2026-9508)
vulnerability in nginx (CVE-2026-9508). Risk of unauthorized operations or information disclosure.
CVE-2026-8326 Vulnerability in path-traversal (CVE-2026-8326)
vulnerability in path-traversal (CVE-2026-8326). Risk of unauthorized operations or information disclosure.
CVE-2026-49324 Vulnerability in CVE-2026-49324 (CVE-2026-49324)
vulnerability in CVE-2026-49324 (CVE-2026-49324). Risk of unauthorized operations or information disclosure.
CVE-2026-49323 Vulnerability in CVE-2026-49323 (CVE-2026-49323)
vulnerability in CVE-2026-49323 (CVE-2026-49323). Confidential information can be exposed externally.
CVE-2026-45611 Rejected reason: Further research determined the issue is not a vulnerability.
Rejected reason: Further research determined the issue is not a vulnerability.
CVE-2026-45551 Cross-Site Scripting (XSS) in CVE-2026-45551 (CVE-2026-45551)
cross-site scripting in CVE-2026-45551 (CVE-2026-45551). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.0.25` or later.
CVE-2026-45312 Vulnerability in CVE-2026-45312 (CVE-2026-45312)
vulnerability in CVE-2026-45312 (CVE-2026-45312). Successful exploitation can lead to full system takeover.
CVE-2026-45043 Privilege Escalation in privilege-escalation (CVE-2026-45043)
vulnerability in privilege-escalation (CVE-2026-45043). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /rustfs/admin/v3/import-iam`. Mitigation: upgrade to `1.0.0-beta.2` or later.
CVE-2026-10071 Unrestricted File Upload in CVE-2026-10071 (CVE-2026-10071)
vulnerability in CVE-2026-10071 (CVE-2026-10071). Successful exploitation can lead to full system takeover.
DEBIAN-CVE-2026-48998 Vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-48998)
vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-48998). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `2.10.2` or later.
DEBIAN-CVE-2026-48111 Vulnerability in 7zip (DEBIAN-CVE-2026-48111)
vulnerability in 7zip (DEBIAN-CVE-2026-48111). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
DEBIAN-CVE-2026-48103 Vulnerability in 7zip (DEBIAN-CVE-2026-48103)
vulnerability in 7zip (DEBIAN-CVE-2026-48103). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
DEBIAN-CVE-2026-48112 Vulnerability in 7zip (DEBIAN-CVE-2026-48112)
vulnerability in 7zip (DEBIAN-CVE-2026-48112). Confidential information can be exposed externally. Mitigation: upgrade to `26.01+dfsg-1` or later.
DEBIAN-CVE-2026-48104 Vulnerability in 7zip (DEBIAN-CVE-2026-48104)
vulnerability in 7zip (DEBIAN-CVE-2026-48104). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
DEBIAN-CVE-2026-49214 Vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-49214)
vulnerability in php-guzzlehttp-psr7 (DEBIAN-CVE-2026-49214). Risk of unauthorized operations or information disclosure. Exploitable via ``Uri``. Mitigation: upgrade to `2.10.2` or later.
DEBIAN-CVE-2024-13745 DEBIAN-CVE-2024-13745
DEBIAN-CVE-2026-48101 Vulnerability in 7zip (DEBIAN-CVE-2026-48101)
vulnerability in 7zip (DEBIAN-CVE-2026-48101). Confidential information can be exposed externally. Mitigation: upgrade to `26.01+dfsg-1` or later.
DEBIAN-CVE-2026-48092 Vulnerability in 7zip (DEBIAN-CVE-2026-48092)
vulnerability in 7zip (DEBIAN-CVE-2026-48092). Confidential information can be exposed externally. Mitigation: upgrade to `26.01+dfsg-1` or later.
DEBIAN-CVE-2026-48102 Vulnerability in 7zip (DEBIAN-CVE-2026-48102)
vulnerability in 7zip (DEBIAN-CVE-2026-48102). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.01+dfsg-1` or later.
CVE-2025-41280 Vulnerability in path-traversal (CVE-2025-41280)
vulnerability in path-traversal (CVE-2025-41280). Successful exploitation can lead to full system takeover.
CVE-2025-41279 OS Command Injection in waterfall-security (CVE-2025-41279)
OS command injection in waterfall-security (CVE-2025-41279). Successful exploitation can lead to full system takeover.
CVE-2025-41278 Out-of-Bounds Read in waterfall-security (CVE-2025-41278)
vulnerability in waterfall-security (CVE-2025-41278). Successful exploitation can lead to full system takeover.
CVE-2025-41281 OS Command Injection in waterfall-security (CVE-2025-41281)
OS command injection in waterfall-security (CVE-2025-41281). Successful exploitation can lead to full system takeover.
CVE-2025-41276 OS Command Injection in waterfall-security (CVE-2025-41276)
OS command injection in waterfall-security (CVE-2025-41276). Successful exploitation can lead to full system takeover.
CVE-2025-41273 Vulnerability in waterfall-security (CVE-2025-41273)
vulnerability in waterfall-security (CVE-2025-41273). Successful exploitation can lead to full system takeover.
CVE-2025-41277 OS Command Injection in waterfall-security (CVE-2025-41277)
OS command injection in waterfall-security (CVE-2025-41277). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →