Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-7636 |
|
Information Disclosure in wordpress (CVE-2026-7636)
vulnerability in wordpress (CVE-2026-7636). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7615 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2026-7615)
vulnerability in wordpress (CVE-2026-7615). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2024-50379 |
|
Vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-50379)
vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-50379). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.13-root.io.8, 10.1.13-root.io.9, 10.1.13-root.io.10, 10.1.13-root.io.11` or later.
|
| ROOT-APP-MAVEN-CVE-2024-56337 |
|
Vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-56337)
vulnerability in io.root.org.apache.tomcat:tomcat-catalina (ROOT-APP-MAVEN-CVE-2024-56337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.13-root.io.8, 10.1.13-root.io.9, 10.1.13-root.io.10, 10.1.13-root.io.11` or later.
|
| MAL-2026-4395 |
|
Vulnerability in @inetafrica/open-claudia (MAL-2026-4395)
vulnerability in @inetafrica/open-claudia (MAL-2026-4395). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process``.
|
| SUSE-SU-2026:21784-1 |
|
Vulnerability in SUSE-SU-2026:21784-1 (SUSE-SU-2026:21784-1)
vulnerability in SUSE-SU-2026:21784-1 (SUSE-SU-2026:21784-1). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2024-34750 |
|
Vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-34750)
vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-34750). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.16-root.io.5, 10.1.16-root.io.6, 10.1.16-root.io.7, 9.0.39-root.io.1, 9.0.39-root.io.2, 9.0.39-root.io.3, 9.0.63-root.io.1` or later.
|
| ROOT-APP-MAVEN-CVE-2024-24549 |
|
Vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-24549)
vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-core (ROOT-APP-MAVEN-CVE-2024-24549). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.16-root.io.5, 10.1.16-root.io.6, 10.1.16-root.io.7, 9.0.63-root.io.1` or later.
|
| ROOT-APP-MAVEN-CVE-2024-23672 |
|
Vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-websocket (ROOT-APP-MAVEN-CVE-2024-23672)
vulnerability in io.root.org.apache.tomcat.embed:tomcat-embed-websocket (ROOT-APP-MAVEN-CVE-2024-23672). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.16-root.io.4, 10.1.16-root.io.5, 10.1.16-root.io.6, 10.1.16-root.io.7, 9.0.39-root.io.3, 9.0.63-root.io.1` or later.
|
| MAL-2026-4417 |
|
Vulnerability in @pisell/pisellos (MAL-2026-4417)
vulnerability in @pisell/pisellos (MAL-2026-4417). Risk of unauthorized operations or information disclosure. Exploitable via ``ScanOrderImpl``.
|
| CLSA-2026-1779375889 |
|
Vulnerability in bpftool (CLSA-2026-1779375889)
vulnerability in bpftool (CLSA-2026-1779375889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.0-284.1101.el9_2.tuxcare.11.els1` or later.
|
| MAL-2026-4753 |
|
Vulnerability in gt-tester-exp-profiler-exp-00000017 (MAL-2026-4753)
vulnerability in gt-tester-exp-profiler-exp-00000017 (MAL-2026-4753). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20787-1 |
|
Vulnerability in openSUSE-SU-2026:20787-1 (openSUSE-SU-2026:20787-1)
vulnerability in openSUSE-SU-2026:20787-1 (openSUSE-SU-2026:20787-1). Risk of unauthorized operations or information disclosure. Exploitable via ``mpeg_l3_encode.c``.
|
| SUSE-SU-2026:21826-1 |
|
Vulnerability in SUSE-SU-2026:21826-1 (SUSE-SU-2026:21826-1)
vulnerability in SUSE-SU-2026:21826-1 (SUSE-SU-2026:21826-1). Risk of unauthorized operations or information disclosure. Exploitable via ``mpeg_l3_encode.c``.
|
| ECHO-9793-c0af-3276 |
|
ECHO-9793-c0af-3276 |
| ECHO-7220-a71f-2bce |
|
ECHO-7220-a71f-2bce |
| ECHO-44ba-d76c-2090 |
|
ECHO-44ba-d76c-2090 |
| ECHO-85a3-417a-5fa2 |
|
ECHO-85a3-417a-5fa2 |
| ECHO-80bc-857b-65b0 |
|
ECHO-80bc-857b-65b0 |
| ECHO-8d60-a235-3fd6 |
|
ECHO-8d60-a235-3fd6 |
| MAL-2026-4597 |
|
Vulnerability in kurumi-fca (MAL-2026-4597)
vulnerability in kurumi-fca (MAL-2026-4597). Risk of unauthorized operations or information disclosure. Exploitable via ``api._imgUpload``.
|
| MAL-2026-4752 |
|
Vulnerability in gt-tester-exp-profiler-exp-00000015 (MAL-2026-4752)
vulnerability in gt-tester-exp-profiler-exp-00000015 (MAL-2026-4752). Risk of unauthorized operations or information disclosure. Exploitable via ``python``.
|
| CLSA-2026-1779438231 |
|
Vulnerability in rsync (CLSA-2026-1779438231)
vulnerability in rsync (CLSA-2026-1779438231). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-19.el9_2.tuxcare.els5` or later.
|
| CVE-2026-5072 |
|
Vulnerability in c (CVE-2026-5072)
vulnerability in c (CVE-2026-5072). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1779437608 |
|
Vulnerability in dnsmasq (CLSA-2026-1779437608)
vulnerability in dnsmasq (CLSA-2026-1779437608). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.79-33.el8.tuxcare.els1` or later.
|
| CLSA-2026-1779437548 |
|
Vulnerability in dnsmasq (CLSA-2026-1779437548)
vulnerability in dnsmasq (CLSA-2026-1779437548). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.85-17.el9_6.tuxcare.els1` or later.
|
| ECHO-e5e9-738b-90e8 |
|
ECHO-e5e9-738b-90e8 |
| CLSA-2026-1779436673 |
|
Vulnerability in vim-X11 (CLSA-2026-1779436673)
vulnerability in vim-X11 (CLSA-2026-1779436673). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.0.1763-19.el8.4.tuxcare.els15` or later.
|
| MAL-2026-4768 |
|
Vulnerability in sklern (MAL-2026-4768)
vulnerability in sklern (MAL-2026-4768). Risk of unauthorized operations or information disclosure. Exploitable via ``__all__``.
|
| CLSA-2026-1779436377 |
|
Vulnerability in cups (CLSA-2026-1779436377)
vulnerability in cups (CLSA-2026-1779436377). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.3op2-33.el9_6.1.tuxcare.els6` or later.
|
| MAL-2026-4387 |
|
Vulnerability in @euqns/nudge-mcp (MAL-2026-4387)
vulnerability in @euqns/nudge-mcp (MAL-2026-4387). Risk of unauthorized operations or information disclosure. Exploitable via ``ping``.
|
| CLSA-2026-1779434490 |
|
Vulnerability in kernel (CLSA-2026-1779434490)
vulnerability in kernel (CLSA-2026-1779434490). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.14.0-570.62.1.el9_6.tuxcare.5.els1` or later.
|
| MAL-2026-4572 |
|
Vulnerability in get-package-lint (MAL-2026-4572)
vulnerability in get-package-lint (MAL-2026-4572). Risk of unauthorized operations or information disclosure. Exploitable via ``debugger``.
|
| CLSA-2026-1779434064 |
|
libdnf: Fix of CVE-2021-3445
libdnf: Fix of CVE-2021-3445
|
| MAL-2026-4671 |
|
Vulnerability in skipshot-agent (MAL-2026-4671)
vulnerability in skipshot-agent (MAL-2026-4671). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-NPM-CVE-2026-45740 |
|
Vulnerability in @rootio/protobufjs (ROOT-APP-NPM-CVE-2026-45740)
vulnerability in @rootio/protobufjs (ROOT-APP-NPM-CVE-2026-45740). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.5.4-root.io.3, 7.5.5-root.io.2, 7.5.7-root.io.1, 8.0.1-root.io.3, 8.0.3-root.io.1, 6.11.4-root.io.1, 7.5.6-root.io.1, 6.11.6-root.io.1, 7.5.6-root.io.2, 7.5.5-root.io.3, 7.5.4-root.io.4, 7.5.7-root.io.2, 8.0.1-root.io.4, 8.0.3-root.io.2, 6.11.4-root.io.2, 6.11.6-root.io.2, 7.5.5-root.io.4, 7.5.4-root.io.5, 8.0.1-root.io.5, 8.0.1-root.io.6, 8.0.3-root.io.3` or later.
|
| MAL-2026-4252 |
|
Vulnerability in @43uh3ig43/telemetry-client (MAL-2026-4252)
vulnerability in @43uh3ig43/telemetry-client (MAL-2026-4252). Risk of unauthorized operations or information disclosure.
|
| HSEC-2026-0007 |
|
Vulnerability in aeson (HSEC-2026-0007)
vulnerability in aeson (HSEC-2026-0007). Risk of unauthorized operations or information disclosure. Exploitable via ``aeson``. Mitigation: upgrade to `2.3.0.0` or later.
|
| MAL-2026-4253 |
|
Vulnerability in pylogft (MAL-2026-4253)
vulnerability in pylogft (MAL-2026-4253). Risk of unauthorized operations or information disclosure. Exploitable via ``__init__.py``.
|
| GHSA-3p5r-gmr8-v7mr |
|
Vulnerability in lynx-keeper-cli (GHSA-3p5r-gmr8-v7mr)
vulnerability in lynx-keeper-cli (GHSA-3p5r-gmr8-v7mr). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4735 |
|
Vulnerability in xy-ai-chat (MAL-2026-4735)
vulnerability in xy-ai-chat (MAL-2026-4735). Risk of unauthorized operations or information disclosure.
|
| GHSA-hqc4-gwfr-49r6 |
|
Vulnerability in @43uh3ig43/telemetry-client (GHSA-hqc4-gwfr-49r6)
vulnerability in @43uh3ig43/telemetry-client (GHSA-hqc4-gwfr-49r6). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4653 |
|
Vulnerability in qaq-core-util-v2 (MAL-2026-4653)
vulnerability in qaq-core-util-v2 (MAL-2026-4653). Risk of unauthorized operations or information disclosure. Exploitable via ``default``.
|
| MAL-2026-4497 |
|
Vulnerability in bingocode (MAL-2026-4497)
vulnerability in bingocode (MAL-2026-4497). Risk of unauthorized operations or information disclosure. Exploitable via ``bin.claude``.
|
| MAL-2026-4412 |
|
Vulnerability in @onerjs/procedural-textures (MAL-2026-4412)
vulnerability in @onerjs/procedural-textures (MAL-2026-4412). Risk of unauthorized operations or information disclosure.
|
| BELL-CVE-2026-8711 |
|
BELL-CVE-2026-8711 |
| BELL-CVE-2026-8328 |
|
BELL-CVE-2026-8328 |
| BELL-CVE-2026-44283 |
|
BELL-CVE-2026-44283 |
| BELL-CVE-2026-44431 |
|
BELL-CVE-2026-44431 |
| BELL-CVE-2026-43490 |
|
BELL-CVE-2026-43490 |