Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-44709 OS Command Injection in CVE-2026-44709 (CVE-2026-44709)
OS command injection in CVE-2026-44709 (CVE-2026-44709). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.8.7` or later.
CVE-2026-45077 Unsafe Deserialization in symfony/monolog-bridge (CVE-2026-45077)
vulnerability in symfony/monolog-bridge (CVE-2026-45077). Risk of unauthorized operations or information disclosure. Exploitable via ``allowed_classes``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45075 Authorization Flaw in symfony/http-kernel (CVE-2026-45075)
vulnerability in symfony/http-kernel (CVE-2026-45075). Data can be tampered with by attackers. Exploitable via ``HEAD``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45074 Vulnerability in symfony/security-http (CVE-2026-45074)
vulnerability in symfony/security-http (CVE-2026-45074). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45073 SQL Injection in symfony/cache (CVE-2026-45073)
SQL injection in symfony/cache (CVE-2026-45073). Risk of unauthorized operations or information disclosure. Exploitable via ``AbstractAdapterTrait``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45072 Cross-Site Scripting (XSS) in symfony/symfony (CVE-2026-45072)
cross-site scripting in symfony/symfony (CVE-2026-45072). Risk of unauthorized operations or information disclosure. Exploitable via ``file_excerpt``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45071 XXE (XML External Entity) in symfony/dom-crawler (CVE-2026-45071)
vulnerability in symfony/dom-crawler (CVE-2026-45071). Confidential information can be exposed externally. Exploitable via ``Crawler``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45070 Vulnerability in symfony/mime (CVE-2026-45070)
vulnerability in symfony/mime (CVE-2026-45070). Risk of unauthorized operations or information disclosure. Exploitable via ``tokens``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45069 Vulnerability in symfony/security-http (CVE-2026-45069)
vulnerability in symfony/security-http (CVE-2026-45069). Confidential information can be exposed externally. Exploitable via ``OidcTokenHandler``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45068 Vulnerability in symfony/mailer (CVE-2026-45068)
vulnerability in symfony/mailer (CVE-2026-45068). Data can be tampered with by attackers. Exploitable via ``MAILER_DSN``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45067 Vulnerability in symfony/mime (CVE-2026-45067)
vulnerability in symfony/mime (CVE-2026-45067). Risk of unauthorized operations or information disclosure. Exploitable via ``SmtpTransport``. Mitigation: upgrade to `8.0.12` or later.
DEBIAN-CVE-2026-9759 Vulnerability in wireshark (DEBIAN-CVE-2026-9759)
vulnerability in wireshark (DEBIAN-CVE-2026-9759). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.6.6-1` or later.
CVE-2026-48792 Vulnerability in c (CVE-2026-48792)
vulnerability in c (CVE-2026-48792). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.1` or later.
CVE-2026-48066 Vulnerability in c (CVE-2026-48066)
vulnerability in c (CVE-2026-48066). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.1` or later.
CVE-2026-48065 Vulnerability in c (CVE-2026-48065)
vulnerability in c (CVE-2026-48065). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.1` or later.
CVE-2026-48064 Authorization Flaw in CVE-2026-48064 (CVE-2026-48064)
vulnerability in CVE-2026-48064 (CVE-2026-48064). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.1` or later.
CVE-2026-47274 Vulnerability in c (CVE-2026-47274)
vulnerability in c (CVE-2026-47274). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-47273 Vulnerability in CVE-2026-47273 (CVE-2026-47273)
vulnerability in CVE-2026-47273 (CVE-2026-47273). Data can be tampered with by attackers. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-47272 Authentication Bypass in c (CVE-2026-47272)
authentication bypass in c (CVE-2026-47272). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-47271 Vulnerability in c (CVE-2026-47271)
vulnerability in c (CVE-2026-47271). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.9.0` or later.
CVE-2026-47161 Unsafe Deserialization in CVE-2026-47161 (CVE-2026-47161)
vulnerability in CVE-2026-47161 (CVE-2026-47161). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-45104 Vulnerability in mapserver (DEBIAN-CVE-2026-45104)
vulnerability in mapserver (DEBIAN-CVE-2026-45104). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.3` or later.
CVE-2026-45108 Authorization Flaw in CVE-2026-45108 (CVE-2026-45108)
vulnerability in CVE-2026-45108 (CVE-2026-45108). Confidential information can be exposed externally. Mitigation: upgrade to `3.1.5` or later.
CVE-2026-45104 Vulnerability in osgeo (CVE-2026-45104)
vulnerability in osgeo (CVE-2026-45104). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.3` or later.
CVE-2026-45102 Vulnerability in CVE-2026-45102 (CVE-2026-45102)
vulnerability in CVE-2026-45102 (CVE-2026-45102). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.98` or later.
CVE-2026-44888 Code Injection in CVE-2026-44888 (CVE-2026-44888)
code injection in CVE-2026-44888 (CVE-2026-44888). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026-05-07` or later.
DEBIAN-CVE-2026-44724 Vulnerability in node-systeminformation (DEBIAN-CVE-2026-44724)
vulnerability in node-systeminformation (DEBIAN-CVE-2026-44724). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.31.6` or later.
DEBIAN-CVE-2026-44681 Vulnerability in python-authlib (DEBIAN-CVE-2026-44681)
vulnerability in python-authlib (DEBIAN-CVE-2026-44681). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.12` or later.
CVE-2026-44887 Code Injection in CVE-2026-44887 (CVE-2026-44887)
code injection in CVE-2026-44887 (CVE-2026-44887). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2026-05-07` or later.
CVE-2026-44886 SQL Injection in sqli (CVE-2026-44886)
SQL injection in sqli (CVE-2026-44886). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026-05-07` or later.
CVE-2026-44590 OS Command Injection in CVE-2026-44590 (CVE-2026-44590)
OS command injection in CVE-2026-44590 (CVE-2026-44590). Data can be tampered with by attackers. Mitigation: upgrade to `0.16.1` or later.
CVE-2026-42877 Cross-Site Scripting (XSS) in facturascripts/facturascripts (CVE-2026-42877)
cross-site scripting in facturascripts/facturascripts (CVE-2026-42877). Risk of unauthorized operations or information disclosure. Exploitable via ``referencia``.
CVE-2026-42197 Cross-Site Scripting (XSS) in django (CVE-2026-42197)
cross-site scripting in django (CVE-2026-42197). Confidential information can be exposed externally. Exploitable via ``ParticipationAdmin``.
CLSA-2026-1779912818 Vulnerability in vim (CLSA-2026-1779912818)
vulnerability in vim (CLSA-2026-1779912818). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.1.0875-5+deb10u6+tuxcare.els19` or later.
CVE-2026-45066 Vulnerability in symfony/html-sanitizer (CVE-2026-45066)
vulnerability in symfony/html-sanitizer (CVE-2026-45066). Risk of unauthorized operations or information disclosure. Exploitable via ``trusted.com``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45064 Vulnerability in symfony/html-sanitizer (CVE-2026-45064)
vulnerability in symfony/html-sanitizer (CVE-2026-45064). Risk of unauthorized operations or information disclosure. Exploitable via ``HtmlSanitizer``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-44982 Vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44982)
vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44982). Risk of unauthorized operations or information disclosure. Exploitable via ``REQUEST_BODY``. Mitigation: upgrade to `1.7.8` or later.
CVE-2026-44981 Vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44981)
vulnerability in github.com/crowdsecurity/crowdsec (CVE-2026-44981). Risk of unauthorized operations or information disclosure. Exploitable via ``DefaultDecompressHandle``. Mitigation: upgrade to `1.7.8` or later.
CVE-2026-44726 Vulnerability in deno (CVE-2026-44726)
vulnerability in deno (CVE-2026-44726). Confidential information can be exposed externally. Exploitable via `POST /v1/charge`. Mitigation: upgrade to `2.7.8` or later.
DEBIAN-CVE-2026-48808 DEBIAN-CVE-2026-48808
DEBIAN-CVE-2026-48784 DEBIAN-CVE-2026-48784
DEBIAN-CVE-2026-47766 DEBIAN-CVE-2026-47766
DEBIAN-CVE-2026-48760 DEBIAN-CVE-2026-48760
DEBIAN-CVE-2026-48747 DEBIAN-CVE-2026-48747
DEBIAN-CVE-2026-47770 DEBIAN-CVE-2026-47770
DEBIAN-CVE-2026-48761 DEBIAN-CVE-2026-48761
DEBIAN-CVE-2026-48805 DEBIAN-CVE-2026-48805
DEBIAN-CVE-2026-48736 DEBIAN-CVE-2026-48736
DEBIAN-CVE-2026-48807 DEBIAN-CVE-2026-48807
DEBIAN-CVE-2026-46636 DEBIAN-CVE-2026-46636

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →