Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| UBUNTU-CVE-2026-41069 |
|
Vulnerability in libheif (UBUNTU-CVE-2026-41069)
vulnerability in libheif (UBUNTU-CVE-2026-41069). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.20.2-1ubuntu0.4` or later.
|
| UBUNTU-CVE-2026-41071 |
|
Vulnerability in libheif (UBUNTU-CVE-2026-41071)
vulnerability in libheif (UBUNTU-CVE-2026-41071). Confidential information can be exposed externally. Mitigation: upgrade to `1.20.2-1ubuntu0.4` or later.
|
| UBUNTU-CVE-2026-39824 |
|
Vulnerability in golang-golang-x-sys (UBUNTU-CVE-2026-39824)
vulnerability in golang-golang-x-sys (UBUNTU-CVE-2026-39824). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-40864 |
|
Vulnerability in jupyterhub (UBUNTU-CVE-2026-40864)
vulnerability in jupyterhub (UBUNTU-CVE-2026-40864). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-40295 |
|
Vulnerability in ruby-devise (UBUNTU-CVE-2026-40295)
vulnerability in ruby-devise (UBUNTU-CVE-2026-40295). Risk of unauthorized operations or information disclosure. Exploitable via `Referer header`.
|
| UBUNTU-CVE-2026-39821 |
|
Vulnerability in golang-golang-x-net-dev (UBUNTU-CVE-2026-39821)
vulnerability in golang-golang-x-net-dev (UBUNTU-CVE-2026-39821). Confidential information can be exposed externally. Mitigation: upgrade to `1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3` or later.
|
| UBUNTU-CVE-2026-31236 |
|
Vulnerability in llm (UBUNTU-CVE-2026-31236)
vulnerability in llm (UBUNTU-CVE-2026-31236). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-25680 |
|
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. |
| UBUNTU-CVE-2026-23927 |
|
Vulnerability in zabbix (UBUNTU-CVE-2026-23927)
vulnerability in zabbix (UBUNTU-CVE-2026-23927). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-27136 |
|
Vulnerability in golang-golang-x-net-dev (UBUNTU-CVE-2026-27136)
vulnerability in golang-golang-x-net-dev (UBUNTU-CVE-2026-27136). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-25681 |
|
Vulnerability in golang-golang-x-net-dev (UBUNTU-CVE-2026-25681)
vulnerability in golang-golang-x-net-dev (UBUNTU-CVE-2026-25681). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-23926 |
|
Vulnerability in zabbix (UBUNTU-CVE-2026-23926)
vulnerability in zabbix (UBUNTU-CVE-2026-23926). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2025-51495 |
|
Vulnerability in swupdate (UBUNTU-CVE-2025-51495)
vulnerability in swupdate (UBUNTU-CVE-2025-51495). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2025-35979 |
|
Vulnerability in intel-microcode (UBUNTU-CVE-2025-35979)
vulnerability in intel-microcode (UBUNTU-CVE-2025-35979). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2025-0186 |
|
Vulnerability in gitlab (UBUNTU-CVE-2025-0186)
vulnerability in gitlab (UBUNTU-CVE-2025-0186). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2018-25357 |
|
Vulnerability in dolibarr (UBUNTU-CVE-2018-25357)
vulnerability in dolibarr (UBUNTU-CVE-2018-25357). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.5.8+dfsg1-1ubuntu1+esm1` or later.
|
| UBUNTU-CVE-2026-48829 |
|
Vulnerability in gsasl (UBUNTU-CVE-2026-48829)
vulnerability in gsasl (UBUNTU-CVE-2026-48829). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.1-1willsync1ubuntu0.1` or later.
|
| CGA-ffc7-pg6q-g6m6 |
|
CGA-ffc7-pg6q-g6m6 |
| USN-8305-1 |
|
Vulnerability in linux-intel-iot-realtime (USN-8305-1)
vulnerability in linux-intel-iot-realtime (USN-8305-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.0-1100.102` or later.
|
| MAL-2026-4496 |
|
Vulnerability in bandkit (MAL-2026-4496)
vulnerability in bandkit (MAL-2026-4496). Risk of unauthorized operations or information disclosure. Exploitable via ``cipher``.
|
| USN-8279-3 |
|
Vulnerability in linux-nvidia-tegra-igx (USN-8279-3)
vulnerability in linux-nvidia-tegra-igx (USN-8279-3). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.0-1049.49` or later.
|
| MAL-2026-4747 |
|
Vulnerability in edison-tools (MAL-2026-4747)
vulnerability in edison-tools (MAL-2026-4747). Risk of unauthorized operations or information disclosure. Exploitable via ``EDISON_QUERY``.
|
| GHSA-2xcr-5qfc-fq54 |
|
Vulnerability in xarc-webpack-cli (GHSA-2xcr-5qfc-fq54)
vulnerability in xarc-webpack-cli (GHSA-2xcr-5qfc-fq54). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-4352 |
|
Vulnerability in xarc-webpack-cli (MAL-2026-4352)
vulnerability in xarc-webpack-cli (MAL-2026-4352). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-2qqv-9mw5-52q2 |
|
Vulnerability in json-to-simple-graphql-schema (GHSA-2qqv-9mw5-52q2)
vulnerability in json-to-simple-graphql-schema (GHSA-2qqv-9mw5-52q2). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| MAL-2026-4590 |
|
Vulnerability in json-to-simple-graphql-schema (MAL-2026-4590)
vulnerability in json-to-simple-graphql-schema (MAL-2026-4590). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| DEBIAN-CVE-2026-48851 |
|
Vulnerability in putty (DEBIAN-CVE-2026-48851)
vulnerability in putty (DEBIAN-CVE-2026-48851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.84-1` or later.
|
| DEBIAN-CVE-2026-48852 |
|
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. |
| DEBIAN-CVE-2026-48850 |
|
PuTTY 0.72 before 0.84 has a double free in RSA KEX. |
| DEBIAN-CVE-2026-43827 |
|
Vulnerability in shiro (DEBIAN-CVE-2026-43827)
vulnerability in shiro (DEBIAN-CVE-2026-43827). Confidential information can be exposed externally.
|
| DEBIAN-CVE-2026-43828 |
|
Vulnerability in shiro (DEBIAN-CVE-2026-43828)
vulnerability in shiro (DEBIAN-CVE-2026-43828). Confidential information can be exposed externally.
|
| CLSA-2026-1779200965 |
|
Vulnerability in linux-buildinfo-5.4.0-230-generic (CLSA-2026-1779200965)
vulnerability in linux-buildinfo-5.4.0-230-generic (CLSA-2026-1779200965). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.0-230.250+tuxcare.els1` or later.
|
| MAL-2026-4552 |
|
Vulnerability in etherproxy-lite (MAL-2026-4552)
vulnerability in etherproxy-lite (MAL-2026-4552). Risk of unauthorized operations or information disclosure.
|
| GHSA-q782-j24w-vv68 |
|
Vulnerability in @izumiswap/sdk (GHSA-q782-j24w-vv68)
vulnerability in @izumiswap/sdk (GHSA-q782-j24w-vv68). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-48848 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48848)
vulnerability in roundcube (DEBIAN-CVE-2026-48848). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48845 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48845)
vulnerability in roundcube (DEBIAN-CVE-2026-48845). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48847 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48847)
vulnerability in roundcube (DEBIAN-CVE-2026-48847). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48849 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48849)
vulnerability in roundcube (DEBIAN-CVE-2026-48849). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48846 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48846)
vulnerability in roundcube (DEBIAN-CVE-2026-48846). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48842 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48842)
vulnerability in roundcube (DEBIAN-CVE-2026-48842). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48844 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48844)
vulnerability in roundcube (DEBIAN-CVE-2026-48844). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| DEBIAN-CVE-2026-48843 |
|
Vulnerability in roundcube (DEBIAN-CVE-2026-48843)
vulnerability in roundcube (DEBIAN-CVE-2026-48843). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.15+dfsg.1-1+deb11u9` or later.
|
| MAL-2026-4770 |
|
Vulnerability in spip-pth-demo (MAL-2026-4770)
vulnerability in spip-pth-demo (MAL-2026-4770). Risk of unauthorized operations or information disclosure. Exploitable via ``python``.
|
| GHSA-hw79-5457-g9c3 |
|
Vulnerability in motion-tool (GHSA-hw79-5457-g9c3)
vulnerability in motion-tool (GHSA-hw79-5457-g9c3). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-4615 |
|
Vulnerability in motion-tool (MAL-2026-4615)
vulnerability in motion-tool (MAL-2026-4615). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-4575 |
|
Vulnerability in happy-dlscord.js (MAL-2026-4575)
vulnerability in happy-dlscord.js (MAL-2026-4575). Risk of unauthorized operations or information disclosure.
|
| GHSA-wxv4-4mmm-mmm9 |
|
Vulnerability in skills-detector (GHSA-wxv4-4mmm-mmm9)
vulnerability in skills-detector (GHSA-wxv4-4mmm-mmm9). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| MAL-2026-4670 |
|
Vulnerability in skills-detector (MAL-2026-4670)
vulnerability in skills-detector (MAL-2026-4670). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| GHSA-6r38-pqqw-473h |
|
Vulnerability in @databus-service-ui/scroll-up-content (GHSA-6r38-pqqw-473h)
vulnerability in @databus-service-ui/scroll-up-content (GHSA-6r38-pqqw-473h). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4378 |
|
Vulnerability in @databus-service-ui/scroll-up-content (MAL-2026-4378)
vulnerability in @databus-service-ui/scroll-up-content (MAL-2026-4378). Risk of unauthorized operations or information disclosure.
|