Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| UBUNTU-CVE-2026-39829 |
|
Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39829)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39829). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-39828 |
|
Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39828)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39828). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-39830 |
|
Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39830)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39830). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-39827 |
|
Vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39827)
vulnerability in golang-go.crypto (UBUNTU-CVE-2026-39827). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:10841-1 |
|
Vulnerability in chromium (openSUSE-SU-2026:10841-1)
vulnerability in chromium (openSUSE-SU-2026:10841-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `148.0.7778.178-1.1` or later.
|
| UBUNTU-CVE-2026-43498 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43498)
vulnerability in linux (UBUNTU-CVE-2026-43498). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-43502 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43502)
vulnerability in linux (UBUNTU-CVE-2026-43502). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-43501 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43501)
vulnerability in linux (UBUNTU-CVE-2026-43501). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-43495 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43495)
vulnerability in linux (UBUNTU-CVE-2026-43495). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-43497 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43497)
vulnerability in linux (UBUNTU-CVE-2026-43497). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-43494 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43494)
vulnerability in linux (UBUNTU-CVE-2026-43494). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.4.0-1160.170~18.04.1` or later.
|
| UBUNTU-CVE-2026-43496 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43496)
vulnerability in linux (UBUNTU-CVE-2026-43496). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-43499 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43499)
vulnerability in linux (UBUNTU-CVE-2026-43499). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-42784 |
|
[openpgp: Don't imply missing key flags from key type] |
| UBUNTU-CVE-2026-8376 |
|
Vulnerability in perl (UBUNTU-CVE-2026-8376)
vulnerability in perl (UBUNTU-CVE-2026-8376). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.18.2-2ubuntu1.7+esm7` or later.
|
| UBUNTU-CVE-2026-44933 |
|
Vulnerability in libzypp (UBUNTU-CVE-2026-44933)
vulnerability in libzypp (UBUNTU-CVE-2026-44933). Successful exploitation can lead to full system takeover. Exploitable via ``PluginScript``.
|
| UBUNTU-CVE-2026-36189 |
|
Vulnerability in uncrustify (UBUNTU-CVE-2026-36189)
vulnerability in uncrustify (UBUNTU-CVE-2026-36189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5297 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
|
| MAL-2026-4755 |
|
Vulnerability in mathepy (MAL-2026-4755)
vulnerability in mathepy (MAL-2026-4755). Risk of unauthorized operations or information disclosure. Exploitable via ``prompt``.
|
| CVE-2026-46701 |
|
Vulnerability in network-ai (CVE-2026-46701)
vulnerability in network-ai (CVE-2026-46701). Data can be tampered with by attackers. Exploitable via `POST /mcp`. Mitigation: upgrade to `5.4.5` or later.
|
| MAL-2026-4540 |
|
Vulnerability in crypt0co-walet-poc (MAL-2026-4540)
vulnerability in crypt0co-walet-poc (MAL-2026-4540). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| MAL-2026-4749 |
|
Vulnerability in fakehuop (MAL-2026-4749)
vulnerability in fakehuop (MAL-2026-4749). Risk of unauthorized operations or information disclosure. Exploitable via ``gsk_...``.
|
| CVE-2026-8435 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8435)
vulnerability in concrete5/concrete5 (CVE-2026-8435). Data can be tampered with by attackers. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8434 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8434)
vulnerability in concrete5/concrete5 (CVE-2026-8434). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8433 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8433)
vulnerability in concrete5/concrete5 (CVE-2026-8433). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8432 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8432)
vulnerability in concrete5/concrete5 (CVE-2026-8432). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8427 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8427)
vulnerability in concrete5/concrete5 (CVE-2026-8427). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8416 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8416)
vulnerability in concrete5/concrete5 (CVE-2026-8416). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8415 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8415)
vulnerability in concrete5/concrete5 (CVE-2026-8415). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8414 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8414)
vulnerability in concrete5/concrete5 (CVE-2026-8414). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8413 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8413)
vulnerability in concrete5/concrete5 (CVE-2026-8413). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8412 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8412)
vulnerability in concrete5/concrete5 (CVE-2026-8412). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8411 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8411)
vulnerability in concrete5/concrete5 (CVE-2026-8411). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8410 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8410)
vulnerability in concrete5/concrete5 (CVE-2026-8410). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8409 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-8409)
vulnerability in concrete5/concrete5 (CVE-2026-8409). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8337 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8337)
vulnerability in concrete5/concrete5 (CVE-2026-8337). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8327 |
|
Privilege Escalation in concrete5/concrete5 (CVE-2026-8327)
vulnerability in concrete5/concrete5 (CVE-2026-8327). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8245 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8245)
vulnerability in concrete5/concrete5 (CVE-2026-8245). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8240 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8240)
vulnerability in concrete5/concrete5 (CVE-2026-8240). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8239 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8239)
vulnerability in concrete5/concrete5 (CVE-2026-8239). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8238 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8238)
vulnerability in concrete5/concrete5 (CVE-2026-8238). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8237 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8237)
vulnerability in concrete5/concrete5 (CVE-2026-8237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8236 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-8236)
vulnerability in concrete5/concrete5 (CVE-2026-8236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-8139 |
|
Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8139)
cross-site scripting in concrete5/concrete5 (CVE-2026-8139). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-7890 |
|
SSRF (Server-Side Request Forgery) in concrete5/concrete5 (CVE-2026-7890)
SSRF in concrete5/concrete5 (CVE-2026-7890). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-7887 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-7887)
vulnerability in concrete5/concrete5 (CVE-2026-7887). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-7886 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-7886)
vulnerability in concrete5/concrete5 (CVE-2026-7886). Risk of unauthorized operations or information disclosure. Exploitable via ``AddMessage``. Mitigation: upgrade to `9.5.1` or later.
|
| CVE-2026-7882 |
|
Cross-Site Request Forgery (CSRF) in concrete5/concrete5 (CVE-2026-7882)
vulnerability in concrete5/concrete5 (CVE-2026-7882). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|
| DEBIAN-CVE-2026-5091 |
|
Vulnerability in libcatalyst-plugin-authentication-perl (DEBIAN-CVE-2026-5091)
vulnerability in libcatalyst-plugin-authentication-perl (DEBIAN-CVE-2026-5091). Confidential information can be exposed externally. Mitigation: upgrade to `0.10026-1` or later.
|
| CVE-2026-7881 |
|
Vulnerability in concrete5/concrete5 (CVE-2026-7881)
vulnerability in concrete5/concrete5 (CVE-2026-7881). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
|