Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-7636 Information Disclosure in wordpress (CVE-2026-7636)
vulnerability in wordpress (CVE-2026-7636). Risk of unauthorized operations or information disclosure.
CVE-2026-7615 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7615)
vulnerability in wordpress (CVE-2026-7615). Risk of unauthorized operations or information disclosure.
ROOT-APP-MAVEN-CVE-2024-50379 Vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-50379)
vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-50379). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.13-root.io.8, 10.1.13-root.io.9, 10.1.13-root.io.10, 10.1.13-root.io.11` or later.
ROOT-APP-MAVEN-CVE-2024-56337 Vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-56337)
vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-56337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.13-root.io.8, 10.1.13-root.io.9, 10.1.13-root.io.10, 10.1.13-root.io.11` or later.
MAL-2026-4395 Vulnerability in @inetafrica/open-claudia (MAL-2026-4395)
vulnerability in @inetafrica/open-claudia (MAL-2026-4395). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process``.
SUSE-SU-2026:21784-1 Vulnerability in SUSE-SU-2026:21784-1 (SUSE-SU-2026:21784-1)
vulnerability in SUSE-SU-2026:21784-1 (SUSE-SU-2026:21784-1). Risk of unauthorized operations or information disclosure.
ROOT-APP-MAVEN-CVE-2024-34750 Vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-34750)
vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-34750). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.16-root.io.5, 10.1.16-root.io.6, 10.1.16-root.io.7, 9.0.39-root.io.1, 9.0.39-root.io.2, 9.0.39-root.io.3, 9.0.63-root.io.1` or later.
ROOT-APP-MAVEN-CVE-2024-24549 Vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-24549)
vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-24549). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.16-root.io.5, 10.1.16-root.io.6, 10.1.16-root.io.7, 9.0.63-root.io.1` or later.
ROOT-APP-MAVEN-CVE-2024-23672 Vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-websocket (ROOT-APP-MAVEN-CVE-2024-23672)
vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-websocket (ROOT-APP-MAVEN-CVE-2024-23672). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.16-root.io.4, 10.1.16-root.io.5, 10.1.16-root.io.6, 10.1.16-root.io.7, 9.0.39-root.io.3, 9.0.63-root.io.1` or later.
MAL-2026-4417 Vulnerability in @pisell/pisellos (MAL-2026-4417)
vulnerability in @pisell/pisellos (MAL-2026-4417). Risk of unauthorized operations or information disclosure. Exploitable via ``ScanOrderImpl``.
CLSA-2026-1779375889 Vulnerability in bpftool (CLSA-2026-1779375889)
vulnerability in bpftool (CLSA-2026-1779375889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.0-284.1101.el9_2.tuxcare.11.els1` or later.
MAL-2026-4753 Vulnerability in gt-tester-exp-profiler-exp-00000017 (MAL-2026-4753)
vulnerability in gt-tester-exp-profiler-exp-00000017 (MAL-2026-4753). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:20787-1 Vulnerability in openSUSE-SU-2026:20787-1 (openSUSE-SU-2026:20787-1)
vulnerability in openSUSE-SU-2026:20787-1 (openSUSE-SU-2026:20787-1). Risk of unauthorized operations or information disclosure. Exploitable via ``mpeg_l3_encode.c``.
SUSE-SU-2026:21826-1 Vulnerability in SUSE-SU-2026:21826-1 (SUSE-SU-2026:21826-1)
vulnerability in SUSE-SU-2026:21826-1 (SUSE-SU-2026:21826-1). Risk of unauthorized operations or information disclosure. Exploitable via ``mpeg_l3_encode.c``.
ECHO-9793-c0af-3276 ECHO-9793-c0af-3276
ECHO-7220-a71f-2bce ECHO-7220-a71f-2bce
ECHO-44ba-d76c-2090 ECHO-44ba-d76c-2090
ECHO-85a3-417a-5fa2 ECHO-85a3-417a-5fa2
ECHO-80bc-857b-65b0 ECHO-80bc-857b-65b0
ECHO-8d60-a235-3fd6 ECHO-8d60-a235-3fd6
MAL-2026-4597 Vulnerability in kurumi-fca (MAL-2026-4597)
vulnerability in kurumi-fca (MAL-2026-4597). Risk of unauthorized operations or information disclosure. Exploitable via ``api._imgUpload``.
MAL-2026-4752 Vulnerability in gt-tester-exp-profiler-exp-00000015 (MAL-2026-4752)
vulnerability in gt-tester-exp-profiler-exp-00000015 (MAL-2026-4752). Risk of unauthorized operations or information disclosure. Exploitable via ``python``.
CLSA-2026-1779438231 Vulnerability in rsync (CLSA-2026-1779438231)
vulnerability in rsync (CLSA-2026-1779438231). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-19.el9_2.tuxcare.els5` or later.
CVE-2026-5072 Vulnerability in c (CVE-2026-5072)
vulnerability in c (CVE-2026-5072). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779437608 Vulnerability in dnsmasq (CLSA-2026-1779437608)
vulnerability in dnsmasq (CLSA-2026-1779437608). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.79-33.el8.tuxcare.els1` or later.
CLSA-2026-1779437548 Vulnerability in dnsmasq (CLSA-2026-1779437548)
vulnerability in dnsmasq (CLSA-2026-1779437548). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.85-17.el9_6.tuxcare.els1` or later.
ECHO-e5e9-738b-90e8 ECHO-e5e9-738b-90e8
CLSA-2026-1779436673 Vulnerability in vim-X11 (CLSA-2026-1779436673)
vulnerability in vim-X11 (CLSA-2026-1779436673). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.0.1763-19.el8.4.tuxcare.els15` or later.
MAL-2026-4768 Vulnerability in sklern (MAL-2026-4768)
vulnerability in sklern (MAL-2026-4768). Risk of unauthorized operations or information disclosure. Exploitable via ``__all__``.
CLSA-2026-1779436377 Vulnerability in cups (CLSA-2026-1779436377)
vulnerability in cups (CLSA-2026-1779436377). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.3op2-33.el9_6.1.tuxcare.els6` or later.
MAL-2026-4387 Vulnerability in @euqns/nudge-mcp (MAL-2026-4387)
vulnerability in @euqns/nudge-mcp (MAL-2026-4387). Risk of unauthorized operations or information disclosure. Exploitable via ``ping``.
CLSA-2026-1779434490 Vulnerability in kernel (CLSA-2026-1779434490)
vulnerability in kernel (CLSA-2026-1779434490). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.14.0-570.62.1.el9_6.tuxcare.5.els1` or later.
MAL-2026-4572 Vulnerability in get-package-lint (MAL-2026-4572)
vulnerability in get-package-lint (MAL-2026-4572). Risk of unauthorized operations or information disclosure. Exploitable via ``debugger``.
CLSA-2026-1779434064 libdnf: Fix of CVE-2021-3445
libdnf: Fix of CVE-2021-3445
MAL-2026-4671 Vulnerability in skipshot-agent (MAL-2026-4671)
vulnerability in skipshot-agent (MAL-2026-4671). Risk of unauthorized operations or information disclosure.
ROOT-APP-NPM-CVE-2026-45740 Vulnerability in @rootio/protobufjs (ROOT-APP-NPM-CVE-2026-45740)
vulnerability in @rootio/protobufjs (ROOT-APP-NPM-CVE-2026-45740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.5.4-root.io.3, 7.5.5-root.io.2, 7.5.7-root.io.1, 8.0.1-root.io.3, 8.0.3-root.io.1, 6.11.4-root.io.1, 7.5.6-root.io.1, 6.11.6-root.io.1, 7.5.6-root.io.2, 7.5.5-root.io.3, 7.5.4-root.io.4, 7.5.7-root.io.2, 8.0.1-root.io.4, 8.0.3-root.io.2, 6.11.4-root.io.2, 6.11.6-root.io.2, 7.5.5-root.io.4, 7.5.4-root.io.5, 8.0.1-root.io.5, 8.0.1-root.io.6, 8.0.3-root.io.3` or later.
MAL-2026-4252 Vulnerability in @43uh3ig43/telemetry-client (MAL-2026-4252)
vulnerability in @43uh3ig43/telemetry-client (MAL-2026-4252). Risk of unauthorized operations or information disclosure.
HSEC-2026-0007 Vulnerability in aeson (HSEC-2026-0007)
vulnerability in aeson (HSEC-2026-0007). Risk of unauthorized operations or information disclosure. Exploitable via ``aeson``. Mitigation: upgrade to `2.3.0.0` or later.
MAL-2026-4253 Vulnerability in pylogft (MAL-2026-4253)
vulnerability in pylogft (MAL-2026-4253). Risk of unauthorized operations or information disclosure. Exploitable via ``__init__.py``.
GHSA-3p5r-gmr8-v7mr Vulnerability in lynx-keeper-cli (GHSA-3p5r-gmr8-v7mr)
vulnerability in lynx-keeper-cli (GHSA-3p5r-gmr8-v7mr). Risk of unauthorized operations or information disclosure.
MAL-2026-4735 Vulnerability in xy-ai-chat (MAL-2026-4735)
vulnerability in xy-ai-chat (MAL-2026-4735). Risk of unauthorized operations or information disclosure.
GHSA-hqc4-gwfr-49r6 Vulnerability in @43uh3ig43/telemetry-client (GHSA-hqc4-gwfr-49r6)
vulnerability in @43uh3ig43/telemetry-client (GHSA-hqc4-gwfr-49r6). Risk of unauthorized operations or information disclosure.
MAL-2026-4653 Vulnerability in qaq-core-util-v2 (MAL-2026-4653)
vulnerability in qaq-core-util-v2 (MAL-2026-4653). Risk of unauthorized operations or information disclosure. Exploitable via ``default``.
MAL-2026-4497 Vulnerability in bingocode (MAL-2026-4497)
vulnerability in bingocode (MAL-2026-4497). Risk of unauthorized operations or information disclosure. Exploitable via ``bin.claude``.
MAL-2026-4412 Vulnerability in @onerjs/procedural-textures (MAL-2026-4412)
vulnerability in @onerjs/procedural-textures (MAL-2026-4412). Risk of unauthorized operations or information disclosure.
BELL-CVE-2026-8711 BELL-CVE-2026-8711
BELL-CVE-2026-8328 BELL-CVE-2026-8328
BELL-CVE-2026-44283 BELL-CVE-2026-44283
BELL-CVE-2026-44431 BELL-CVE-2026-44431
BELL-CVE-2026-43490 BELL-CVE-2026-43490

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →