Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8672 |
|
Vulnerability in avantra (CVE-2026-8672)
vulnerability in avantra (CVE-2026-8672). Confidential information can be exposed externally.
|
| CVE-2026-8340 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8340)
vulnerability in concrete5/concrete5 (CVE-2026-8340). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2022-34363 |
|
Vulnerability in dell (CVE-2022-34363)
vulnerability in dell (CVE-2022-34363). Data can be tampered with by attackers.
|
| CVE-2026-8347 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8347)
vulnerability in concrete5/concrete5 (CVE-2026-8347). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-9256 |
|
Vulnerability in nginx (CVE-2026-9256)
vulnerability in nginx (CVE-2026-9256). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.24.0, 1.30.2, 1.31.1` or later.
|
| CVE-2026-8353 |
|
Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8353)
cross-site scripting in concrete5/concrete5 (CVE-2026-8353). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2025-32751 |
|
Vulnerability in dell (CVE-2025-32751)
vulnerability in dell (CVE-2025-32751). Confidential information can be exposed externally.
|
| CVE-2026-8670 |
|
Vulnerability in avantra (CVE-2026-8670)
vulnerability in avantra (CVE-2026-8670). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8673 |
|
Vulnerability in avantra (CVE-2026-8673)
vulnerability in avantra (CVE-2026-8673). Confidential information can be exposed externally.
|
| CVE-2025-32749 |
|
Vulnerability in dell (CVE-2025-32749)
vulnerability in dell (CVE-2025-32749). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8992 |
|
Vulnerability in ivanti (CVE-2026-8992)
vulnerability in ivanti (CVE-2026-8992). Successful exploitation can lead to full system takeover.
|
| CVE-2022-31231 |
|
Vulnerability in dell (CVE-2022-31231)
vulnerability in dell (CVE-2022-31231). Confidential information can be exposed externally.
|
| CVE-2026-8671 |
|
Vulnerability in avantra (CVE-2026-8671)
vulnerability in avantra (CVE-2026-8671). Data can be tampered with by attackers.
|
| CVE-2025-32747 |
|
Vulnerability in dell (CVE-2025-32747)
vulnerability in dell (CVE-2025-32747). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-32746 |
|
Vulnerability in dell (CVE-2025-32746)
vulnerability in dell (CVE-2025-32746). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-32745 |
|
Vulnerability in dell (CVE-2025-32745)
vulnerability in dell (CVE-2025-32745). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44930 |
|
Vulnerability in org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (CVE-2026-44930)
vulnerability in org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (CVE-2026-44930). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.11` or later.
|
| CVE-2025-26483 |
|
Open Redirect in dell (CVE-2025-26483)
vulnerability in dell (CVE-2025-26483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44417 |
|
Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417)
vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.6.11` or later.
|
| CVE-2026-5308 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-5308)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-5308). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-44618 |
|
XXE (XML External Entity) in org.apache.cxf:cxf-rt-ws-transfer (CVE-2026-44618)
vulnerability in org.apache.cxf:cxf-rt-ws-transfer (CVE-2026-44618). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.11` or later.
|
| CVE-2026-3473 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-3473)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-3473). Confidential information can be exposed externally. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-5740 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-5740)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-5740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-4646 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4646)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4646). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-4635 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4635)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-4635). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-3636 |
|
Information Disclosure in github.com/mattermost/mattermost-server (CVE-2026-3636)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-3636). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| CVE-2026-5755 |
|
Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-5755)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-5755). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.15` or later.
|
| MAL-2026-4805 |
|
Vulnerability in metricflow-tracker (MAL-2026-4805)
vulnerability in metricflow-tracker (MAL-2026-4805). Risk of unauthorized operations or information disclosure. Exploitable via ``Metricflow``.
|
| MAL-2026-4814 |
|
Vulnerability in vectordb-engine (MAL-2026-4814)
vulnerability in vectordb-engine (MAL-2026-4814). Risk of unauthorized operations or information disclosure. Exploitable via ``build_ext``.
|
| MAL-2026-4809 |
|
Vulnerability in baidubsrc (MAL-2026-4809)
vulnerability in baidubsrc (MAL-2026-4809). Risk of unauthorized operations or information disclosure.
|
| ROOT-OS-DEBIAN-12-CVE-2026-32740 |
|
Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32740)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32740). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9` or later.
|
| ROOT-OS-DEBIAN-12-CVE-2026-32882 |
|
Vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32882)
vulnerability in rootio-libheif (ROOT-OS-DEBIAN-12-CVE-2026-32882). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.15.1-1+deb12u1.root.io.7, 1.15.1-1+deb12u1.root.io.8, 1.15.1-1+deb12u1.root.io.9` or later.
|
| MAL-2026-4811 |
|
Vulnerability in docontrol-mcp (MAL-2026-4811)
vulnerability in docontrol-mcp (MAL-2026-4811). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2076-1 |
|
Vulnerability in SUSE-SU-2026:2076-1 (SUSE-SU-2026:2076-1)
vulnerability in SUSE-SU-2026:2076-1 (SUSE-SU-2026:2076-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2074-1 |
|
Vulnerability in SUSE-SU-2026:2074-1 (SUSE-SU-2026:2074-1)
vulnerability in SUSE-SU-2026:2074-1 (SUSE-SU-2026:2074-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2073-1 |
|
Vulnerability in SUSE-SU-2026:2073-1 (SUSE-SU-2026:2073-1)
vulnerability in SUSE-SU-2026:2073-1 (SUSE-SU-2026:2073-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2072-1 |
|
Vulnerability in SUSE-SU-2026:2072-1 (SUSE-SU-2026:2072-1)
vulnerability in SUSE-SU-2026:2072-1 (SUSE-SU-2026:2072-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2071-1 |
|
Vulnerability in SUSE-SU-2026:2071-1 (SUSE-SU-2026:2071-1)
vulnerability in SUSE-SU-2026:2071-1 (SUSE-SU-2026:2071-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21850-1 |
|
Vulnerability in SUSE-SU-2026:21850-1 (SUSE-SU-2026:21850-1)
vulnerability in SUSE-SU-2026:21850-1 (SUSE-SU-2026:21850-1). Risk of unauthorized operations or information disclosure. Exploitable via ``cupsFileGetConf``.
|
| SUSE-SU-2026:21836-1 |
|
Vulnerability in SUSE-SU-2026:21836-1 (SUSE-SU-2026:21836-1)
vulnerability in SUSE-SU-2026:21836-1 (SUSE-SU-2026:21836-1). Risk of unauthorized operations or information disclosure. Exploitable via ``cupsFileGetConf``.
|
| MAL-2026-4810 |
|
Vulnerability in binproto (MAL-2026-4810)
vulnerability in binproto (MAL-2026-4810). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21851-1 |
|
Vulnerability in SUSE-SU-2026:21851-1 (SUSE-SU-2026:21851-1)
vulnerability in SUSE-SU-2026:21851-1 (SUSE-SU-2026:21851-1). Risk of unauthorized operations or information disclosure.
|
| GHSA-r4ww-65gv-rhv8 |
|
Vulnerability in int-node (GHSA-r4ww-65gv-rhv8)
vulnerability in int-node (GHSA-r4ww-65gv-rhv8). Risk of unauthorized operations or information disclosure.
|
| GHSA-r4j3-79hx-xpr6 |
|
Vulnerability in web3.prc (GHSA-r4j3-79hx-xpr6)
vulnerability in web3.prc (GHSA-r4j3-79hx-xpr6). Risk of unauthorized operations or information disclosure.
|
| GHSA-g3vg-qhhh-pfv7 |
|
Vulnerability in web3-prices (GHSA-g3vg-qhhh-pfv7)
vulnerability in web3-prices (GHSA-g3vg-qhhh-pfv7). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20814-1 |
|
Vulnerability in openSUSE-SU-2026:20814-1 (openSUSE-SU-2026:20814-1)
vulnerability in openSUSE-SU-2026:20814-1 (openSUSE-SU-2026:20814-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21849-1 |
|
Vulnerability in SUSE-SU-2026:21849-1 (SUSE-SU-2026:21849-1)
vulnerability in SUSE-SU-2026:21849-1 (SUSE-SU-2026:21849-1). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20812-1 |
|
Vulnerability in openSUSE-SU-2026:20812-1 (openSUSE-SU-2026:20812-1)
vulnerability in openSUSE-SU-2026:20812-1 (openSUSE-SU-2026:20812-1). Risk of unauthorized operations or information disclosure. Exploitable via ``cupsFileGetConf``.
|
| SUSE-SU-2026:21848-1 |
|
Vulnerability in SUSE-SU-2026:21848-1 (SUSE-SU-2026:21848-1)
vulnerability in SUSE-SU-2026:21848-1 (SUSE-SU-2026:21848-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21835-1 |
|
Vulnerability in SUSE-SU-2026:21835-1 (SUSE-SU-2026:21835-1)
vulnerability in SUSE-SU-2026:21835-1 (SUSE-SU-2026:21835-1). Risk of unauthorized operations or information disclosure.
|