Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-4694 |
|
Vulnerability in tubebrain (MAL-2026-4694)
vulnerability in tubebrain (MAL-2026-4694). Risk of unauthorized operations or information disclosure.
|
| GHSA-789x-j439-qx3f |
|
Vulnerability in to-cms (GHSA-789x-j439-qx3f)
vulnerability in to-cms (GHSA-789x-j439-qx3f). Risk of unauthorized operations or information disclosure. Exploitable via ``start``.
|
| MAL-2026-4693 |
|
Vulnerability in to-cms (MAL-2026-4693)
vulnerability in to-cms (MAL-2026-4693). Risk of unauthorized operations or information disclosure. Exploitable via ``start``.
|
| MAL-2026-4390 |
|
Vulnerability in @flowselections/core (MAL-2026-4390)
vulnerability in @flowselections/core (MAL-2026-4390). Risk of unauthorized operations or information disclosure. Exploitable via ``supabase``.
|
| CVE-2026-6871 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-6871)
cross-site scripting in drupal (CVE-2026-6871). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6367 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-6367)
cross-site scripting in drupal (CVE-2026-6367). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.3.7` or later.
|
| CVE-2026-6366 |
|
Vulnerability in drupal (CVE-2026-6366)
vulnerability in drupal (CVE-2026-6366). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.5.9, 10.6.7, 11.2.11, 11.3.7` or later.
|
| CVE-2026-6365 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-6365)
cross-site scripting in drupal (CVE-2026-6365). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.5.9, 10.6.7, 11.2.11, 11.3.7` or later.
|
| CVE-2026-6095 |
|
Cross-Site Scripting (XSS) in drupal (CVE-2026-6095)
cross-site scripting in drupal (CVE-2026-6095). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34600 |
|
Information Disclosure in CVE-2026-34600 (CVE-2026-34600)
vulnerability in CVE-2026-34600 (CVE-2026-34600). Confidential information can be exposed externally.
|
| CGA-5767-pfqj-2jqw |
|
CGA-5767-pfqj-2jqw |
| MAL-2026-4426 |
|
Vulnerability in @riteshkumar04/stack-audit (MAL-2026-4426)
vulnerability in @riteshkumar04/stack-audit (MAL-2026-4426). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
|
| GHSA-64jc-f3r5-gp74 |
|
Vulnerability in martinez-polygon-clipping-tony (GHSA-64jc-f3r5-gp74)
vulnerability in martinez-polygon-clipping-tony (GHSA-64jc-f3r5-gp74). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4606 |
|
Vulnerability in martinez-polygon-clipping-tony (MAL-2026-4606)
vulnerability in martinez-polygon-clipping-tony (MAL-2026-4606). Risk of unauthorized operations or information disclosure.
|
| USN-8281-1 |
|
Vulnerability in linux (USN-8281-1)
vulnerability in linux (USN-8281-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.15.0-250.262` or later.
|
| USN-8280-1 |
|
Vulnerability in linux-gcp-5.4 (USN-8280-1)
vulnerability in linux-gcp-5.4 (USN-8280-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.0-1162.171~18.04.1` or later.
|
| USN-8279-1 |
|
Vulnerability in linux-aws-5.15 (USN-8279-1)
vulnerability in linux-aws-5.15 (USN-8279-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.0-1108.115~20.04.1` or later.
|
| USN-8278-1 |
|
Vulnerability in linux-ibm-6.8 (USN-8278-1)
vulnerability in linux-ibm-6.8 (USN-8278-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-1055.56~22.04.1` or later.
|
| USN-8277-1 |
|
Vulnerability in linux-hwe-6.17 (USN-8277-1)
vulnerability in linux-hwe-6.17 (USN-8277-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.17.0-29.29~24.04.1` or later.
|
| DEBIAN-CVE-2026-5090 |
|
Vulnerability in libtemplate-perl (DEBIAN-CVE-2026-5090)
vulnerability in libtemplate-perl (DEBIAN-CVE-2026-5090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.102-3` or later.
|
| CVE-2026-5090 |
|
Cross-Site Scripting (XSS) in CVE-2026-5090 (CVE-2026-5090)
cross-site scripting in CVE-2026-5090 (CVE-2026-5090). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34358 |
|
Vulnerability in privilege-escalation (CVE-2026-34358)
vulnerability in privilege-escalation (CVE-2026-34358). Confidential information can be exposed externally.
|
| CVE-2026-34246 |
|
Vulnerability in privilege-escalation (CVE-2026-34246)
vulnerability in privilege-escalation (CVE-2026-34246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34241 |
|
Cross-Site Scripting (XSS) in CVE-2026-34241 (CVE-2026-34241)
cross-site scripting in CVE-2026-34241 (CVE-2026-34241). Confidential information can be exposed externally.
|
| CVE-2026-34234 |
|
OS Command Injection in CVE-2026-34234 (CVE-2026-34234)
OS command injection in CVE-2026-34234 (CVE-2026-34234). Successful exploitation can lead to full system takeover.
|
| CVE-2025-15645 |
|
Vulnerability in dos (CVE-2025-15645)
vulnerability in dos (CVE-2025-15645). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-36343 |
|
Vulnerability in CVE-2024-36343 (CVE-2024-36343)
vulnerability in CVE-2024-36343 (CVE-2024-36343). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-7345 |
|
Vulnerability in CVE-2023-7345 (CVE-2023-7345)
vulnerability in CVE-2023-7345 (CVE-2023-7345). Data can be tampered with by attackers.
|
| UBUNTU-CVE-2026-5090 |
|
Vulnerability in libtemplate-perl (UBUNTU-CVE-2026-5090)
vulnerability in libtemplate-perl (UBUNTU-CVE-2026-5090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.27-1ubuntu0.22.04.1` or later.
|
| MAL-2026-4757 |
|
Vulnerability in morin (MAL-2026-4757)
vulnerability in morin (MAL-2026-4757). Risk of unauthorized operations or information disclosure. Exploitable via ``Common.log_func``.
|
| MAL-2026-4742 |
|
Vulnerability in aurapro-ui (MAL-2026-4742)
vulnerability in aurapro-ui (MAL-2026-4742). Risk of unauthorized operations or information disclosure. Exploitable via ``open_webui``.
|
| MAL-2026-4177 |
|
Vulnerability in did-0091 (MAL-2026-4177)
vulnerability in did-0091 (MAL-2026-4177). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4741 |
|
Vulnerability in aurafarmer (MAL-2026-4741)
vulnerability in aurafarmer (MAL-2026-4741). Risk of unauthorized operations or information disclosure. Exploitable via ``aurex``.
|
| MAL-2026-4767 |
|
Vulnerability in silly-logger (MAL-2026-4767)
vulnerability in silly-logger (MAL-2026-4767). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4761 |
|
Vulnerability in openirf (MAL-2026-4761)
vulnerability in openirf (MAL-2026-4761). Risk of unauthorized operations or information disclosure. Exploitable via ``tdqm``.
|
| DEBIAN-CVE-2026-46529 |
|
Vulnerability in atril (DEBIAN-CVE-2026-46529)
vulnerability in atril (DEBIAN-CVE-2026-46529). Risk of unauthorized operations or information disclosure. Exploitable via ``g_shell_quote``. Mitigation: upgrade to `1.6.2` or later.
|
| CGA-2357-7m3c-45x3 |
|
CGA-2357-7m3c-45x3 |
| MAL-2026-4748 |
|
Vulnerability in eplang (MAL-2026-4748)
vulnerability in eplang (MAL-2026-4748). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4764 |
|
Vulnerability in pycalendar-api (MAL-2026-4764)
vulnerability in pycalendar-api (MAL-2026-4764). Risk of unauthorized operations or information disclosure. Exploitable via ``httpxyz``.
|
| CVE-2026-39250 |
|
Vulnerability in CVE-2026-39250 (CVE-2026-39250)
vulnerability in CVE-2026-39250 (CVE-2026-39250). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-32882 |
|
Vulnerability in libheif (DEBIAN-CVE-2026-32882)
vulnerability in libheif (DEBIAN-CVE-2026-32882). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-32814 |
|
Vulnerability in libheif (DEBIAN-CVE-2026-32814)
vulnerability in libheif (DEBIAN-CVE-2026-32814). Confidential information can be exposed externally.
|
| DEBIAN-CVE-2026-32741 |
|
Vulnerability in libheif (DEBIAN-CVE-2026-32741)
vulnerability in libheif (DEBIAN-CVE-2026-32741). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34233 |
|
Vulnerability in CVE-2026-34233 (CVE-2026-34233)
vulnerability in CVE-2026-34233 (CVE-2026-34233). Confidential information can be exposed externally.
|
| CVE-2026-34216 |
|
Vulnerability in CVE-2026-34216 (CVE-2026-34216)
vulnerability in CVE-2026-34216 (CVE-2026-34216). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32882 |
|
Out-of-Bounds Read in dos (CVE-2026-32882)
vulnerability in dos (CVE-2026-32882). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32814 |
|
Information Disclosure in CVE-2026-32814 (CVE-2026-32814)
vulnerability in CVE-2026-32814 (CVE-2026-32814). Confidential information can be exposed externally.
|
| CVE-2026-32741 |
|
Vulnerability in CVE-2026-32741 (CVE-2026-32741)
vulnerability in CVE-2026-32741 (CVE-2026-32741). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-57798 |
|
Vulnerability in dos (CVE-2025-57798)
vulnerability in dos (CVE-2025-57798). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1779225366 |
|
Vulnerability in libxml2 (CLSA-2026-1779225366)
vulnerability in libxml2 (CLSA-2026-1779225366). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.13-12.el9_6.tuxcare.els4` or later.
|