Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-44709 |
|
OS Command Injection in CVE-2026-44709 (CVE-2026-44709)
OS command injection in CVE-2026-44709 (CVE-2026-44709). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.8.7` or later.
|
| CVE-2026-45077 |
|
Unsafe Deserialization in symfony/monolog-bridge (CVE-2026-45077)
vulnerability in symfony/monolog-bridge (CVE-2026-45077). Risk of unauthorized operations or information disclosure. Exploitable via ``allowed_classes``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45075 |
|
Authorization Flaw in symfony/http-kernel (CVE-2026-45075)
vulnerability in symfony/http-kernel (CVE-2026-45075). Data can be tampered with by attackers. Exploitable via ``HEAD``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45074 |
|
Vulnerability in symfony/security-http (CVE-2026-45074)
vulnerability in symfony/security-http (CVE-2026-45074). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45073 |
|
SQL Injection in symfony/cache (CVE-2026-45073)
SQL injection in symfony/cache (CVE-2026-45073). Risk of unauthorized operations or information disclosure. Exploitable via ``AbstractAdapterTrait``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45072 |
|
Cross-Site Scripting (XSS) in symfony/symfony (CVE-2026-45072)
cross-site scripting in symfony/symfony (CVE-2026-45072). Risk of unauthorized operations or information disclosure. Exploitable via ``file_excerpt``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45071 |
|
XXE (XML External Entity) in symfony/dom-crawler (CVE-2026-45071)
vulnerability in symfony/dom-crawler (CVE-2026-45071). Confidential information can be exposed externally. Exploitable via ``Crawler``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45070 |
|
Vulnerability in symfony/mime (CVE-2026-45070)
vulnerability in symfony/mime (CVE-2026-45070). Risk of unauthorized operations or information disclosure. Exploitable via ``tokens``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45069 |
|
Vulnerability in symfony/security-http (CVE-2026-45069)
vulnerability in symfony/security-http (CVE-2026-45069). Confidential information can be exposed externally. Exploitable via ``OidcTokenHandler``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45068 |
|
Vulnerability in symfony/mailer (CVE-2026-45068)
vulnerability in symfony/mailer (CVE-2026-45068). Data can be tampered with by attackers. Exploitable via ``MAILER_DSN``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45067 |
|
Vulnerability in symfony/mime (CVE-2026-45067)
vulnerability in symfony/mime (CVE-2026-45067). Risk of unauthorized operations or information disclosure. Exploitable via ``SmtpTransport``. Mitigation: upgrade to `8.0.12` or later.
|
| DEBIAN-CVE-2026-9759 |
|
Vulnerability in wireshark (DEBIAN-CVE-2026-9759)
vulnerability in wireshark (DEBIAN-CVE-2026-9759). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.6.6-1` or later.
|
| CVE-2026-48792 |
|
Vulnerability in c (CVE-2026-48792)
vulnerability in c (CVE-2026-48792). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.1` or later.
|
| CVE-2026-48066 |
|
Vulnerability in c (CVE-2026-48066)
vulnerability in c (CVE-2026-48066). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.1` or later.
|
| CVE-2026-48065 |
|
Vulnerability in c (CVE-2026-48065)
vulnerability in c (CVE-2026-48065). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.1` or later.
|
| CVE-2026-48064 |
|
Authorization Flaw in CVE-2026-48064 (CVE-2026-48064)
vulnerability in CVE-2026-48064 (CVE-2026-48064). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.1` or later.
|
| CVE-2026-47274 |
|
Vulnerability in c (CVE-2026-47274)
vulnerability in c (CVE-2026-47274). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2026-47273 |
|
Vulnerability in CVE-2026-47273 (CVE-2026-47273)
vulnerability in CVE-2026-47273 (CVE-2026-47273). Data can be tampered with by attackers. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2026-47272 |
|
Authentication Bypass in c (CVE-2026-47272)
authentication bypass in c (CVE-2026-47272). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2026-47271 |
|
Vulnerability in c (CVE-2026-47271)
vulnerability in c (CVE-2026-47271). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2026-47161 |
|
Unsafe Deserialization in CVE-2026-47161 (CVE-2026-47161)
vulnerability in CVE-2026-47161 (CVE-2026-47161). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-45104 |
|
Vulnerability in mapserver (DEBIAN-CVE-2026-45104)
vulnerability in mapserver (DEBIAN-CVE-2026-45104). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-45108 |
|
Authorization Flaw in CVE-2026-45108 (CVE-2026-45108)
vulnerability in CVE-2026-45108 (CVE-2026-45108). Confidential information can be exposed externally. Mitigation: upgrade to `3.1.5` or later.
|
| CVE-2026-45104 |
|
Vulnerability in osgeo (CVE-2026-45104)
vulnerability in osgeo (CVE-2026-45104). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.3` or later.
|
| CVE-2026-45102 |
|
Vulnerability in CVE-2026-45102 (CVE-2026-45102)
vulnerability in CVE-2026-45102 (CVE-2026-45102). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.98` or later.
|
| CVE-2026-44888 |
|
Code Injection in CVE-2026-44888 (CVE-2026-44888)
code injection in CVE-2026-44888 (CVE-2026-44888). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026-05-07` or later.
|
| DEBIAN-CVE-2026-44724 |
|
Vulnerability in node-systeminformation (DEBIAN-CVE-2026-44724)
vulnerability in node-systeminformation (DEBIAN-CVE-2026-44724). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.31.6` or later.
|
| DEBIAN-CVE-2026-44681 |
|
Vulnerability in python-authlib (DEBIAN-CVE-2026-44681)
vulnerability in python-authlib (DEBIAN-CVE-2026-44681). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.12` or later.
|
| CVE-2026-44887 |
|
Code Injection in CVE-2026-44887 (CVE-2026-44887)
code injection in CVE-2026-44887 (CVE-2026-44887). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026-05-07` or later.
|
| CVE-2026-44886 |
|
SQL Injection in sqli (CVE-2026-44886)
SQL injection in sqli (CVE-2026-44886). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026-05-07` or later.
|
| CVE-2026-44590 |
|
OS Command Injection in CVE-2026-44590 (CVE-2026-44590)
OS command injection in CVE-2026-44590 (CVE-2026-44590). Data can be tampered with by attackers. Mitigation: upgrade to `0.16.1` or later.
|
| CVE-2026-42877 |
|
Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-42877)
cross-site scripting in facturascripts/facturascripts (CVE-2026-42877). Risk of unauthorized operations or information disclosure. Exploitable via ``referencia``.
|
| CVE-2026-42197 |
|
Cross-Site Scripting (XSS) in django (CVE-2026-42197)
cross-site scripting in django (CVE-2026-42197). Confidential information can be exposed externally. Exploitable via ``ParticipationAdmin``.
|
| CLSA-2026-1779912818 |
|
Vulnerability in vim (CLSA-2026-1779912818)
vulnerability in vim (CLSA-2026-1779912818). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.1.0875-5+deb10u6+tuxcare.els19` or later.
|
| CVE-2026-45066 |
|
Vulnerability in symfony/html-sanitizer (CVE-2026-45066)
vulnerability in symfony/html-sanitizer (CVE-2026-45066). Risk of unauthorized operations or information disclosure. Exploitable via ``trusted.com``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45064 |
|
Vulnerability in symfony/html-sanitizer (CVE-2026-45064)
vulnerability in symfony/html-sanitizer (CVE-2026-45064). Risk of unauthorized operations or information disclosure. Exploitable via ``HtmlSanitizer``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-44982 |
|
Vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44982)
vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44982). Risk of unauthorized operations or information disclosure. Exploitable via ``REQUEST_BODY``. Mitigation: upgrade to `1.7.8` or later.
|
| CVE-2026-44981 |
|
Vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44981)
vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44981). Risk of unauthorized operations or information disclosure. Exploitable via ``DefaultDecompressHandle``. Mitigation: upgrade to `1.7.8` or later.
|
| CVE-2026-44726 |
|
Vulnerability in deno (CVE-2026-44726)
vulnerability in deno (CVE-2026-44726). Confidential information can be exposed externally. Exploitable via `POST /v1/charge`. Mitigation: upgrade to `2.7.8` or later.
|
| DEBIAN-CVE-2026-48808 |
|
DEBIAN-CVE-2026-48808 |
| DEBIAN-CVE-2026-48784 |
|
DEBIAN-CVE-2026-48784 |
| DEBIAN-CVE-2026-47766 |
|
DEBIAN-CVE-2026-47766 |
| DEBIAN-CVE-2026-48760 |
|
DEBIAN-CVE-2026-48760 |
| DEBIAN-CVE-2026-48747 |
|
DEBIAN-CVE-2026-48747 |
| DEBIAN-CVE-2026-47770 |
|
DEBIAN-CVE-2026-47770 |
| DEBIAN-CVE-2026-48761 |
|
DEBIAN-CVE-2026-48761 |
| DEBIAN-CVE-2026-48805 |
|
DEBIAN-CVE-2026-48805 |
| DEBIAN-CVE-2026-48736 |
|
DEBIAN-CVE-2026-48736 |
| DEBIAN-CVE-2026-48807 |
|
DEBIAN-CVE-2026-48807 |
| DEBIAN-CVE-2026-46636 |
|
DEBIAN-CVE-2026-46636 |