Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2024-56462 |
|
Vulnerability in ibm (CVE-2024-56462)
vulnerability in ibm (CVE-2024-56462). Successful exploitation can lead to full system takeover.
|
| ECHO-f891-7125-7bdd |
|
ECHO-f891-7125-7bdd |
| ECHO-83f4-7634-6152 |
|
ECHO-83f4-7634-6152 |
| ECHO-dd96-efb6-3ce2 |
|
ECHO-dd96-efb6-3ce2 |
| ECHO-857c-410c-991e |
|
ECHO-857c-410c-991e |
| ECHO-af7e-623c-66dd |
|
ECHO-af7e-623c-66dd |
| ECHO-2180-09ae-37e0 |
|
ECHO-2180-09ae-37e0 |
| ECHO-213b-ac19-c565 |
|
ECHO-213b-ac19-c565 |
| ECHO-ae26-87e2-ebb9 |
|
ECHO-ae26-87e2-ebb9 |
| CVE-2026-9712 |
|
Vulnerability in pretix (CVE-2026-9712)
vulnerability in pretix (CVE-2026-9712). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.4.2` or later.
|
| CVE-2026-9674 |
|
Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674)
vulnerability in org.jenkins-ci.plugins:jenkins-multijob-plugin (CVE-2026-9674). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `669.v9d96a` or later.
|
| CVE-2026-6957 |
|
Path Traversal in mattermost (CVE-2026-6957)
path traversal in mattermost (CVE-2026-6957). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49103 |
|
Vulnerability in CVE-2026-49103 (CVE-2026-49103)
vulnerability in CVE-2026-49103 (CVE-2026-49103). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49102 |
|
Cross-Site Scripting (XSS) in CVE-2026-49102 (CVE-2026-49102)
cross-site scripting in CVE-2026-49102 (CVE-2026-49102). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49059 |
|
Open Redirect in CVE-2026-49059 (CVE-2026-49059)
vulnerability in CVE-2026-49059 (CVE-2026-49059). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49053 |
|
Vulnerability in CVE-2026-49053 (CVE-2026-49053)
vulnerability in CVE-2026-49053 (CVE-2026-49053). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49052 |
|
Vulnerability in CVE-2026-49052 (CVE-2026-49052)
vulnerability in CVE-2026-49052 (CVE-2026-49052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49051 |
|
Vulnerability in CVE-2026-49051 (CVE-2026-49051)
vulnerability in CVE-2026-49051 (CVE-2026-49051). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49047 |
|
Vulnerability in CVE-2026-49047 (CVE-2026-49047)
vulnerability in CVE-2026-49047 (CVE-2026-49047). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49046 |
|
SQL Injection in sqli (CVE-2026-49046)
SQL injection in sqli (CVE-2026-49046). Confidential information can be exposed externally.
|
| CVE-2026-49045 |
|
Vulnerability in CVE-2026-49045 (CVE-2026-49045)
vulnerability in CVE-2026-49045 (CVE-2026-49045). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49044 |
|
Cross-Site Scripting (XSS) in CVE-2026-49044 (CVE-2026-49044)
cross-site scripting in CVE-2026-49044 (CVE-2026-49044). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48973 |
|
Vulnerability in CVE-2026-48973 (CVE-2026-48973)
vulnerability in CVE-2026-48973 (CVE-2026-48973). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48927 |
|
Cross-Site Scripting (XSS) in org.jenkins-ci.plugins:buildgraph-view (CVE-2026-48927)
cross-site scripting in org.jenkins-ci.plugins:buildgraph-view (CVE-2026-48927). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48926 |
|
Privilege Escalation in org.jenkins-ci.plugins:job-import-plugin (CVE-2026-48926)
vulnerability in org.jenkins-ci.plugins:job-import-plugin (CVE-2026-48926). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `143.145.v48f9a` or later.
|
| CVE-2026-48925 |
|
Cross-Site Request Forgery (CSRF) in org.jenkins-ci.plugins:github-integration-parent (CVE-2026-48925)
vulnerability in org.jenkins-ci.plugins:github-integration-parent (CVE-2026-48925). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.4` or later.
|
| CVE-2026-48924 |
|
Open Redirect in org.jenkins-ci.plugins:bitbucket-oauth (CVE-2026-48924)
vulnerability in org.jenkins-ci.plugins:bitbucket-oauth (CVE-2026-48924). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.18` or later.
|
| CVE-2026-48923 |
|
Privilege Escalation in com.rapid7:jenkinsci-appspider-plugin (CVE-2026-48923)
vulnerability in com.rapid7:jenkinsci-appspider-plugin (CVE-2026-48923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.18` or later.
|
| CVE-2026-48922 |
|
Path Traversal in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922)
path traversal in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `725.ve52b` or later.
|
| CVE-2026-48921 |
|
Vulnerability in io.jenkins.plugins:pipeline-groovy-lib (CVE-2026-48921)
vulnerability in io.jenkins.plugins:pipeline-groovy-lib (CVE-2026-48921). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `798.v5cc688825312` or later.
|
| CVE-2026-48920 |
|
Vulnerability in org.jenkins-ci.plugins:email-ext (CVE-2026-48920)
vulnerability in org.jenkins-ci.plugins:email-ext (CVE-2026-48920). Successful exploitation can lead to full system takeover. Exploitable via ``base64``. Mitigation: upgrade to `1933.1935.v276319e3cc47` or later.
|
| CVE-2026-48919 |
|
Unsafe Deserialization in org.jenkins-ci.plugins:active-directory (CVE-2026-48919)
vulnerability in org.jenkins-ci.plugins:active-directory (CVE-2026-48919). Successful exploitation can lead to full system takeover. Exploitable via ``true``. Mitigation: upgrade to `2.41.1` or later.
|
| CVE-2026-48918 |
|
SSRF (Server-Side Request Forgery) in org.jenkins-ci.plugins:active-directory (CVE-2026-48918)
SSRF in org.jenkins-ci.plugins:active-directory (CVE-2026-48918). Successful exploitation can lead to full system takeover. Exploitable via ``true``. Mitigation: upgrade to `2.41.1` or later.
|
| CVE-2026-48917 |
|
Unsafe Deserialization in org.jenkins-ci.plugins:ldap (CVE-2026-48917)
vulnerability in org.jenkins-ci.plugins:ldap (CVE-2026-48917). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `807.809.vd3a` or later.
|
| CVE-2026-48916 |
|
SSRF (Server-Side Request Forgery) in org.jenkins-ci.plugins:ldap (CVE-2026-48916)
SSRF in org.jenkins-ci.plugins:ldap (CVE-2026-48916). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `807.809.vd3a` or later.
|
| CVE-2026-48545 |
|
Vulnerability in gradio (CVE-2026-48545)
vulnerability in gradio (CVE-2026-48545). Confidential information can be exposed externally. Mitigation: upgrade to `6.15.0` or later.
|
| DEBIAN-CVE-2026-45571 |
|
Vulnerability in golang-github-go-git-go-git (DEBIAN-CVE-2026-45571)
vulnerability in golang-github-go-git-go-git (DEBIAN-CVE-2026-45571). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.1` or later.
|
| DEBIAN-CVE-2026-45570 |
|
Vulnerability in golang-github-go-git-go-git (DEBIAN-CVE-2026-45570)
vulnerability in golang-github-go-git-go-git (DEBIAN-CVE-2026-45570). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.19.1` or later.
|
| CVE-2026-48544 |
|
Path Traversal in taipy (CVE-2026-48544)
path traversal in taipy (CVE-2026-48544). Confidential information can be exposed externally.
|
| CVE-2026-47119 |
|
Cross-Site Scripting (XSS) in CVE-2026-47119 (CVE-2026-47119)
cross-site scripting in CVE-2026-47119 (CVE-2026-47119). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47118 |
|
Path Traversal in path-traversal (CVE-2026-47118)
path traversal in path-traversal (CVE-2026-47118). Confidential information can be exposed externally.
|
| DEBIAN-CVE-2026-44839 |
|
Vulnerability in rabbitmq-server (DEBIAN-CVE-2026-44839)
vulnerability in rabbitmq-server (DEBIAN-CVE-2026-44839). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.2` or later.
|
| DEBIAN-CVE-2026-45022 |
|
Vulnerability in golang-github-go-git-go-git (DEBIAN-CVE-2026-45022)
vulnerability in golang-github-go-git-go-git (DEBIAN-CVE-2026-45022). Data can be tampered with by attackers. Mitigation: upgrade to `5.19.0` or later.
|
| DEBIAN-CVE-2026-44988 |
|
Vulnerability in libvncserver (DEBIAN-CVE-2026-44988)
vulnerability in libvncserver (DEBIAN-CVE-2026-44988). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.15+dfsg-5` or later.
|
| CVE-2026-44988 |
|
Out-of-Bounds Write in CVE-2026-44988 (CVE-2026-44988)
out-of-bounds write in CVE-2026-44988 (CVE-2026-44988). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44839 |
|
Vulnerability in rabbitmq (CVE-2026-44839)
vulnerability in rabbitmq (CVE-2026-44839). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.2` or later.
|
| CVE-2026-44838 |
|
Authorization Flaw in rabbitmq (CVE-2026-44838)
vulnerability in rabbitmq (CVE-2026-44838). Confidential information can be exposed externally. Mitigation: upgrade to `4.2.4` or later.
|
| CVE-2026-44830 |
|
Vulnerability in CVE-2026-44830 (CVE-2026-44830)
vulnerability in CVE-2026-44830 (CVE-2026-44830). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.1` or later.
|
| CVE-2026-42280 |
|
Authorization Flaw in auth0-js (CVE-2026-42280)
vulnerability in auth0-js (CVE-2026-42280). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.0` or later.
|
| CVE-2026-42184 |
|
SSRF (Server-Side Request Forgery) in tauri (CVE-2026-42184)
SSRF in tauri (CVE-2026-42184). Successful exploitation can lead to full system takeover. Exploitable via ``true``. Mitigation: upgrade to `2.11.1` or later.
|