Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-4649 |
|
Vulnerability in promptbook-mcp (MAL-2026-4649)
vulnerability in promptbook-mcp (MAL-2026-4649). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9057 |
|
Vulnerability in CVE-2026-9057 (CVE-2026-9057)
vulnerability in CVE-2026-9057 (CVE-2026-9057). Confidential information can be exposed externally.
|
| CVE-2026-9056 |
|
Vulnerability in CVE-2026-9056 (CVE-2026-9056)
vulnerability in CVE-2026-9056 (CVE-2026-9056). Risk of unauthorized operations or information disclosure.
|
| CLEANSTART-2026-TD94714 |
|
Vulnerability in yunikorn-web-fips (CLEANSTART-2026-TD94714)
vulnerability in yunikorn-web-fips (CLEANSTART-2026-TD94714). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-r0` or later.
|
| CVE-2026-7522 |
|
Vulnerability in wordpress (CVE-2026-7522)
vulnerability in wordpress (CVE-2026-7522). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5075 |
|
Information Disclosure in wordpress (CVE-2026-5075)
vulnerability in wordpress (CVE-2026-5075). Risk of unauthorized operations or information disclosure.
|
| CLEANSTART-2026-MX56097 |
|
Vulnerability in yunikorn-k8shim-fips (CLEANSTART-2026-MX56097)
vulnerability in yunikorn-k8shim-fips (CLEANSTART-2026-MX56097). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-r1` or later.
|
| CLEANSTART-2026-JQ70227 |
|
Vulnerability in yunikorn-k8shim (CLEANSTART-2026-JQ70227)
vulnerability in yunikorn-k8shim (CLEANSTART-2026-JQ70227). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-r2` or later.
|
| CLEANSTART-2026-ZE01287 |
|
Vulnerability in yunikorn-web (CLEANSTART-2026-ZE01287)
vulnerability in yunikorn-web (CLEANSTART-2026-ZE01287). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-r0` or later.
|
| CLEANSTART-2026-GA28186 |
|
Vulnerability in amazon-cloudwatch-agent (CLEANSTART-2026-GA28186)
vulnerability in amazon-cloudwatch-agent (CLEANSTART-2026-GA28186). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.300066.1-r0` or later.
|
| CLEANSTART-2026-KH40159 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-KH40159)
vulnerability in apache-zookeeper (CLEANSTART-2026-KH40159). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.5-r0` or later.
|
| CLEANSTART-2026-KJ79497 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-KJ79497)
vulnerability in apache-zookeeper (CLEANSTART-2026-KJ79497). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.2-r6` or later.
|
| CLEANSTART-2026-AQ91770 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-AQ91770)
vulnerability in apache-zookeeper (CLEANSTART-2026-AQ91770). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.4-r6` or later.
|
| CLEANSTART-2026-WH09664 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-WH09664)
vulnerability in apache-zookeeper (CLEANSTART-2026-WH09664). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.6-r0` or later.
|
| CLEANSTART-2026-BR66659 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-BR66659)
vulnerability in apache-zookeeper (CLEANSTART-2026-BR66659). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.4-r4` or later.
|
| MAL-2026-4560 |
|
Vulnerability in fca-official-uzair-rajput (MAL-2026-4560)
vulnerability in fca-official-uzair-rajput (MAL-2026-4560). Risk of unauthorized operations or information disclosure. Exploitable via ``latest``.
|
| GHSA-rv4w-rvp6-p6rg |
|
Vulnerability in security-env-loader (GHSA-rv4w-rvp6-p6rg)
vulnerability in security-env-loader (GHSA-rv4w-rvp6-p6rg). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4665 |
|
Vulnerability in security-env-loader (MAL-2026-4665)
vulnerability in security-env-loader (MAL-2026-4665). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4459 |
|
Vulnerability in @touchvue/chat (MAL-2026-4459)
vulnerability in @touchvue/chat (MAL-2026-4459). Risk of unauthorized operations or information disclosure. Exploitable via ``moduleInfo.config.action``.
|
| MAL-2026-4568 |
|
Vulnerability in fulcrum-sessions (MAL-2026-4568)
vulnerability in fulcrum-sessions (MAL-2026-4568). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9010 |
|
SQL Injection in wordpress (CVE-2026-9010)
SQL injection in wordpress (CVE-2026-9010). Confidential information can be exposed externally.
|
| CVE-2026-9003 |
|
SQL Injection in sqli (CVE-2026-9003)
SQL injection in sqli (CVE-2026-9003). Confidential information can be exposed externally.
|
| CVE-2026-7637 |
|
Unsafe Deserialization in wordpress (CVE-2026-7637)
vulnerability in wordpress (CVE-2026-7637). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7460 |
|
Cross-Site Scripting (XSS) in CVE-2026-7460 (CVE-2026-7460)
cross-site scripting in CVE-2026-7460 (CVE-2026-7460). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4493 |
|
Vulnerability in axiosqqq (MAL-2026-4493)
vulnerability in axiosqqq (MAL-2026-4493). Risk of unauthorized operations or information disclosure. Exploitable via ``axiosqqq``.
|
| CVE-2026-24215 |
|
Vulnerability in dos (CVE-2026-24215)
vulnerability in dos (CVE-2026-24215). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24214 |
|
Vulnerability in dos (CVE-2026-24214)
vulnerability in dos (CVE-2026-24214). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24213 |
|
Out-of-Bounds Read in dos (CVE-2026-24213)
vulnerability in dos (CVE-2026-24213). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24210 |
|
Vulnerability in dos (CVE-2026-24210)
vulnerability in dos (CVE-2026-24210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24209 |
|
Path Traversal in path-traversal (CVE-2026-24209)
path traversal in path-traversal (CVE-2026-24209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24208 |
|
Path Traversal in path-traversal (CVE-2026-24208)
path traversal in path-traversal (CVE-2026-24208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24207 |
|
Vulnerability in dos (CVE-2026-24207)
vulnerability in dos (CVE-2026-24207). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24206 |
|
Vulnerability in dos (CVE-2026-24206)
vulnerability in dos (CVE-2026-24206). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24163 |
|
Unsafe Deserialization in dos (CVE-2026-24163)
vulnerability in dos (CVE-2026-24163). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24160 |
|
Vulnerability in dos (CVE-2026-24160)
vulnerability in dos (CVE-2026-24160). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24142 |
|
Unsafe Deserialization in deserialization (CVE-2026-24142)
vulnerability in deserialization (CVE-2026-24142). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-33255 |
|
Unsafe Deserialization in dos (CVE-2025-33255)
vulnerability in dos (CVE-2025-33255). Successful exploitation can lead to full system takeover.
|
| CVE-2025-15369 |
|
Vulnerability in wordpress (CVE-2025-15369)
vulnerability in wordpress (CVE-2025-15369). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4502 |
|
Vulnerability in bucket-protocol-sdk-v2 (MAL-2026-4502)
vulnerability in bucket-protocol-sdk-v2 (MAL-2026-4502). Risk of unauthorized operations or information disclosure. Exploitable via ``sui``.
|
| JLSEC-2026-514 |
|
Vulnerability in ZeroMQ_jll (JLSEC-2026-514)
vulnerability in ZeroMQ_jll (JLSEC-2026-514). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.4+0` or later.
|
| JLSEC-2026-515 |
|
Vulnerability in ZeroMQ_jll (JLSEC-2026-515)
vulnerability in ZeroMQ_jll (JLSEC-2026-515). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.4+0` or later.
|
| JLSEC-2026-513 |
|
Vulnerability in ZeroMQ_jll (JLSEC-2026-513)
vulnerability in ZeroMQ_jll (JLSEC-2026-513). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.4+0` or later.
|
| JLSEC-2026-517 |
|
Vulnerability in ZeroMQ_jll (JLSEC-2026-517)
vulnerability in ZeroMQ_jll (JLSEC-2026-517). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.4+0` or later.
|
| JLSEC-2026-516 |
|
Vulnerability in ZeroMQ_jll (JLSEC-2026-516)
vulnerability in ZeroMQ_jll (JLSEC-2026-516). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.4+0` or later.
|
| MAL-2026-4418 |
|
Vulnerability in @pluxee-connect/api-client (MAL-2026-4418)
vulnerability in @pluxee-connect/api-client (MAL-2026-4418). Risk of unauthorized operations or information disclosure. Exploitable via ``process.version``.
|
| MAL-2026-4608 |
|
Vulnerability in mcp-server-iehub-proxy (MAL-2026-4608)
vulnerability in mcp-server-iehub-proxy (MAL-2026-4608). Risk of unauthorized operations or information disclosure. Exploitable via ``process.env``.
|
| MAL-2026-4449 |
|
Vulnerability in @tailwind-core/oxide-win32-x64-msvc (MAL-2026-4449)
vulnerability in @tailwind-core/oxide-win32-x64-msvc (MAL-2026-4449). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
|
| CGA-48vf-5q9j-qgjw |
|
CGA-48vf-5q9j-qgjw |
| CGA-rh98-hxq6-j3cx |
|
CGA-rh98-hxq6-j3cx |
| CGA-gw4h-993m-7mcw |
|
CGA-gw4h-993m-7mcw |