Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| ECHO-8127-8787-df33 |
|
ECHO-8127-8787-df33 |
| USN-8303-1 |
|
Vulnerability in python-git (USN-8303-1)
vulnerability in python-git (USN-8303-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.3.2~RC1-3ubuntu0.1~esm3` or later.
|
| CVE-2026-9642 |
|
Vulnerability in deltaww (CVE-2026-9642)
vulnerability in deltaww (CVE-2026-9642). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9583 |
|
Information Disclosure in CVE-2026-9583 (CVE-2026-9583)
vulnerability in CVE-2026-9583 (CVE-2026-9583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9582 |
|
Cross-Site Request Forgery (CSRF) in CVE-2026-9582 (CVE-2026-9582)
vulnerability in CVE-2026-9582 (CVE-2026-9582). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9581 |
|
Vulnerability in CVE-2026-9581 (CVE-2026-9581)
vulnerability in CVE-2026-9581 (CVE-2026-9581). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9580 |
|
Vulnerability in CVE-2026-9580 (CVE-2026-9580)
vulnerability in CVE-2026-9580 (CVE-2026-9580). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9579 |
|
Vulnerability in CVE-2026-9579 (CVE-2026-9579)
vulnerability in CVE-2026-9579 (CVE-2026-9579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8676 |
|
Vulnerability in CVE-2026-8676 (CVE-2026-8676)
vulnerability in CVE-2026-8676 (CVE-2026-8676). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48593 |
|
Vulnerability in oban_web (CVE-2026-48593)
vulnerability in oban_web (CVE-2026-48593). Risk of unauthorized operations or information disclosure. Exploitable via ``oban_web``. Mitigation: upgrade to `2.12.5` or later.
|
| CVE-2026-48592 |
|
Vulnerability in oban_web (CVE-2026-48592)
vulnerability in oban_web (CVE-2026-48592). Risk of unauthorized operations or information disclosure. Exploitable via ``oban_web``. Mitigation: upgrade to `2.12.5` or later.
|
| CVE-2026-47672 |
|
Vulnerability in com.oviva.telematik:epa4all-rest-service (CVE-2026-47672)
vulnerability in com.oviva.telematik:epa4all-rest-service (CVE-2026-47672). Data can be tampered with by attackers.
|
| CVE-2026-45413 |
|
Vulnerability in CVE-2026-45413 (CVE-2026-45413)
vulnerability in CVE-2026-45413 (CVE-2026-45413). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.1` or later.
|
| CVE-2026-45412 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-45412)
SSRF in ssrf (CVE-2026-45412). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.1` or later.
|
| DEBIAN-CVE-2026-44898 |
|
Vulnerability in mistune (DEBIAN-CVE-2026-44898)
vulnerability in mistune (DEBIAN-CVE-2026-44898). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| DEBIAN-CVE-2026-44899 |
|
Vulnerability in mistune (DEBIAN-CVE-2026-44899)
vulnerability in mistune (DEBIAN-CVE-2026-44899). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| DEBIAN-CVE-2026-44896 |
|
Vulnerability in mistune (DEBIAN-CVE-2026-44896)
vulnerability in mistune (DEBIAN-CVE-2026-44896). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-44897 |
|
Vulnerability in mistune (DEBIAN-CVE-2026-44897)
vulnerability in mistune (DEBIAN-CVE-2026-44897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| CVE-2026-44847 |
|
Authentication Bypass in django (CVE-2026-44847)
authentication bypass in django (CVE-2026-44847). Data can be tampered with by attackers. Mitigation: upgrade to `2.9.0` or later.
|
| DEBIAN-CVE-2026-44708 |
|
Vulnerability in mistune (DEBIAN-CVE-2026-44708)
vulnerability in mistune (DEBIAN-CVE-2026-44708). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| DEBIAN-CVE-2026-44836 |
|
Vulnerability in ruby-view-component (DEBIAN-CVE-2026-44836)
vulnerability in ruby-view-component (DEBIAN-CVE-2026-44836). Confidential information can be exposed externally. Mitigation: upgrade to `4.9.0` or later.
|
| DEBIAN-CVE-2026-44837 |
|
Vulnerability in ruby-view-component (DEBIAN-CVE-2026-44837)
vulnerability in ruby-view-component (DEBIAN-CVE-2026-44837). Confidential information can be exposed externally. Mitigation: upgrade to `4.9.0` or later.
|
| CVE-2026-44451 |
|
Vulnerability in CVE-2026-44451 (CVE-2026-44451)
vulnerability in CVE-2026-44451 (CVE-2026-44451). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.7` or later.
|
| CVE-2026-44450 |
|
Vulnerability in c (CVE-2026-44450)
vulnerability in c (CVE-2026-44450). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.7` or later.
|
| CVE-2026-44449 |
|
Vulnerability in c (CVE-2026-44449)
vulnerability in c (CVE-2026-44449). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.7` or later.
|
| CVE-2026-44444 |
|
OS Command Injection in CVE-2026-44444 (CVE-2026-44444)
OS command injection in CVE-2026-44444 (CVE-2026-44444). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.9.7` or later.
|
| CVE-2026-44443 |
|
Vulnerability in CVE-2026-44443 (CVE-2026-44443)
vulnerability in CVE-2026-44443 (CVE-2026-44443). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/auth/sign-up/email`. Mitigation: upgrade to `0.9.7` or later.
|
| CVE-2026-42337 |
|
Vulnerability in CVE-2026-42337 (CVE-2026-42337)
vulnerability in CVE-2026-42337 (CVE-2026-42337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.1` or later.
|
| CVE-2026-42336 |
|
Vulnerability in ssrf (CVE-2026-42336)
vulnerability in ssrf (CVE-2026-42336). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.1` or later.
|
| CVE-2026-42335 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-42335)
SSRF in ssrf (CVE-2026-42335). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.1` or later.
|
| CVE-2026-36239 |
|
PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality
PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality
|
| CVE-2025-68711 |
|
Vulnerability in c (CVE-2025-68711)
vulnerability in c (CVE-2025-68711). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-68708 |
|
Vulnerability in c (CVE-2025-68708)
vulnerability in c (CVE-2025-68708). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14361 |
|
Vulnerability in CVE-2025-14361 (CVE-2025-14361)
vulnerability in CVE-2025-14361 (CVE-2025-14361). Data can be tampered with by attackers.
|
| UBUNTU-CVE-2026-44898 |
|
Vulnerability in mistune (UBUNTU-CVE-2026-44898)
vulnerability in mistune (UBUNTU-CVE-2026-44898). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| UBUNTU-CVE-2026-44897 |
|
Vulnerability in mistune (UBUNTU-CVE-2026-44897)
vulnerability in mistune (UBUNTU-CVE-2026-44897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| UBUNTU-CVE-2026-44899 |
|
Vulnerability in mistune (UBUNTU-CVE-2026-44899)
vulnerability in mistune (UBUNTU-CVE-2026-44899). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| UBUNTU-CVE-2026-44896 |
|
Vulnerability in mistune (UBUNTU-CVE-2026-44896)
vulnerability in mistune (UBUNTU-CVE-2026-44896). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-44708 |
|
Vulnerability in mistune (UBUNTU-CVE-2026-44708)
vulnerability in mistune (UBUNTU-CVE-2026-44708). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1` or later.
|
| CGA-592h-v4g4-f479 |
|
CGA-592h-v4g4-f479 |
| MAL-2026-4828 |
|
Vulnerability in hmacsync (MAL-2026-4828)
vulnerability in hmacsync (MAL-2026-4828). Risk of unauthorized operations or information disclosure.
|
| CGA-fqw7-h8cr-5wfq |
|
CGA-fqw7-h8cr-5wfq |
| CGA-7mqv-2cf3-9c6w |
|
CGA-7mqv-2cf3-9c6w |
| CGA-6m9h-q7pj-66qh |
|
CGA-6m9h-q7pj-66qh |
| CGA-xv69-m2fc-3fwg |
|
CGA-xv69-m2fc-3fwg |
| USN-7972-2 |
|
Vulnerability in opencc (USN-7972-2)
vulnerability in opencc (USN-7972-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.4-5ubuntu0.1~esm1` or later.
|
| USN-8063-2 |
|
Vulnerability in protobuf (USN-8063-2)
vulnerability in protobuf (USN-8063-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.0-9.1ubuntu1.1+esm4` or later.
|
| CVE-2026-48048 |
|
Vulnerability in org.xwiki.platform:xwiki-platform-livetable-ui (CVE-2026-48048)
vulnerability in org.xwiki.platform:xwiki-platform-livetable-ui (CVE-2026-48048). Confidential information can be exposed externally. Exploitable via ``LiveTableResults``. Mitigation: upgrade to `17.10.3` or later.
|
| CVE-2026-9575 |
|
Vulnerability in sqli (CVE-2026-9575)
vulnerability in sqli (CVE-2026-9575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9574 |
|
Vulnerability in sqli (CVE-2026-9574)
vulnerability in sqli (CVE-2026-9574). Risk of unauthorized operations or information disclosure.
|