Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-4694 Vulnerability in tubebrain (MAL-2026-4694)
vulnerability in tubebrain (MAL-2026-4694). Risk of unauthorized operations or information disclosure.
GHSA-789x-j439-qx3f Vulnerability in to-cms (GHSA-789x-j439-qx3f)
vulnerability in to-cms (GHSA-789x-j439-qx3f). Risk of unauthorized operations or information disclosure. Exploitable via ``start``.
MAL-2026-4693 Vulnerability in to-cms (MAL-2026-4693)
vulnerability in to-cms (MAL-2026-4693). Risk of unauthorized operations or information disclosure. Exploitable via ``start``.
MAL-2026-4390 Vulnerability in @flowselections/core (MAL-2026-4390)
vulnerability in @flowselections/core (MAL-2026-4390). Risk of unauthorized operations or information disclosure. Exploitable via ``supabase``.
CVE-2026-6871 Cross-Site Scripting (XSS) in drupal (CVE-2026-6871)
cross-site scripting in drupal (CVE-2026-6871). Risk of unauthorized operations or information disclosure.
CVE-2026-6367 Cross-Site Scripting (XSS) in drupal (CVE-2026-6367)
cross-site scripting in drupal (CVE-2026-6367). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.3.7` or later.
CVE-2026-6366 Vulnerability in drupal (CVE-2026-6366)
vulnerability in drupal (CVE-2026-6366). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.5.9, 10.6.7, 11.2.11, 11.3.7` or later.
CVE-2026-6365 Cross-Site Scripting (XSS) in drupal (CVE-2026-6365)
cross-site scripting in drupal (CVE-2026-6365). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.5.9, 10.6.7, 11.2.11, 11.3.7` or later.
CVE-2026-6095 Cross-Site Scripting (XSS) in drupal (CVE-2026-6095)
cross-site scripting in drupal (CVE-2026-6095). Risk of unauthorized operations or information disclosure.
CVE-2026-34600 Information Disclosure in CVE-2026-34600 (CVE-2026-34600)
vulnerability in CVE-2026-34600 (CVE-2026-34600). Confidential information can be exposed externally.
CGA-5767-pfqj-2jqw CGA-5767-pfqj-2jqw
MAL-2026-4426 Vulnerability in @riteshkumar04/stack-audit (MAL-2026-4426)
vulnerability in @riteshkumar04/stack-audit (MAL-2026-4426). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
GHSA-64jc-f3r5-gp74 Vulnerability in martinez-polygon-clipping-tony (GHSA-64jc-f3r5-gp74)
vulnerability in martinez-polygon-clipping-tony (GHSA-64jc-f3r5-gp74). Risk of unauthorized operations or information disclosure.
MAL-2026-4606 Vulnerability in martinez-polygon-clipping-tony (MAL-2026-4606)
vulnerability in martinez-polygon-clipping-tony (MAL-2026-4606). Risk of unauthorized operations or information disclosure.
USN-8281-1 Vulnerability in linux (USN-8281-1)
vulnerability in linux (USN-8281-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.15.0-250.262` or later.
USN-8280-1 Vulnerability in linux-gcp-5.4 (USN-8280-1)
vulnerability in linux-gcp-5.4 (USN-8280-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.4.0-1162.171~18.04.1` or later.
USN-8279-1 Vulnerability in linux-aws-5.15 (USN-8279-1)
vulnerability in linux-aws-5.15 (USN-8279-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.15.0-1108.115~20.04.1` or later.
USN-8278-1 Vulnerability in linux-ibm-6.8 (USN-8278-1)
vulnerability in linux-ibm-6.8 (USN-8278-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.8.0-1055.56~22.04.1` or later.
USN-8277-1 Vulnerability in linux-hwe-6.17 (USN-8277-1)
vulnerability in linux-hwe-6.17 (USN-8277-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.17.0-29.29~24.04.1` or later.
DEBIAN-CVE-2026-5090 Vulnerability in libtemplate-perl (DEBIAN-CVE-2026-5090)
vulnerability in libtemplate-perl (DEBIAN-CVE-2026-5090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.102-3` or later.
CVE-2026-5090 Cross-Site Scripting (XSS) in CVE-2026-5090 (CVE-2026-5090)
cross-site scripting in CVE-2026-5090 (CVE-2026-5090). Risk of unauthorized operations or information disclosure.
CVE-2026-34358 Vulnerability in privilege-escalation (CVE-2026-34358)
vulnerability in privilege-escalation (CVE-2026-34358). Confidential information can be exposed externally.
CVE-2026-34246 Vulnerability in privilege-escalation (CVE-2026-34246)
vulnerability in privilege-escalation (CVE-2026-34246). Risk of unauthorized operations or information disclosure.
CVE-2026-34241 Cross-Site Scripting (XSS) in CVE-2026-34241 (CVE-2026-34241)
cross-site scripting in CVE-2026-34241 (CVE-2026-34241). Confidential information can be exposed externally.
CVE-2026-34234 OS Command Injection in CVE-2026-34234 (CVE-2026-34234)
OS command injection in CVE-2026-34234 (CVE-2026-34234). Successful exploitation can lead to full system takeover.
CVE-2025-15645 Vulnerability in dos (CVE-2025-15645)
vulnerability in dos (CVE-2025-15645). Risk of unauthorized operations or information disclosure.
CVE-2024-36343 Vulnerability in CVE-2024-36343 (CVE-2024-36343)
vulnerability in CVE-2024-36343 (CVE-2024-36343). Risk of unauthorized operations or information disclosure.
CVE-2023-7345 Vulnerability in CVE-2023-7345 (CVE-2023-7345)
vulnerability in CVE-2023-7345 (CVE-2023-7345). Data can be tampered with by attackers.
UBUNTU-CVE-2026-5090 Vulnerability in libtemplate-perl (UBUNTU-CVE-2026-5090)
vulnerability in libtemplate-perl (UBUNTU-CVE-2026-5090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.27-1ubuntu0.22.04.1` or later.
MAL-2026-4757 Vulnerability in morin (MAL-2026-4757)
vulnerability in morin (MAL-2026-4757). Risk of unauthorized operations or information disclosure. Exploitable via ``Common.log_func``.
MAL-2026-4742 Vulnerability in aurapro-ui (MAL-2026-4742)
vulnerability in aurapro-ui (MAL-2026-4742). Risk of unauthorized operations or information disclosure. Exploitable via ``open_webui``.
MAL-2026-4177 Vulnerability in did-0091 (MAL-2026-4177)
vulnerability in did-0091 (MAL-2026-4177). Risk of unauthorized operations or information disclosure.
MAL-2026-4741 Vulnerability in aurafarmer (MAL-2026-4741)
vulnerability in aurafarmer (MAL-2026-4741). Risk of unauthorized operations or information disclosure. Exploitable via ``aurex``.
MAL-2026-4767 Vulnerability in silly-logger (MAL-2026-4767)
vulnerability in silly-logger (MAL-2026-4767). Risk of unauthorized operations or information disclosure.
MAL-2026-4761 Vulnerability in openirf (MAL-2026-4761)
vulnerability in openirf (MAL-2026-4761). Risk of unauthorized operations or information disclosure. Exploitable via ``tdqm``.
DEBIAN-CVE-2026-46529 Vulnerability in atril (DEBIAN-CVE-2026-46529)
vulnerability in atril (DEBIAN-CVE-2026-46529). Risk of unauthorized operations or information disclosure. Exploitable via ``g_shell_quote``. Mitigation: upgrade to `1.6.2` or later.
CGA-2357-7m3c-45x3 CGA-2357-7m3c-45x3
MAL-2026-4748 Vulnerability in eplang (MAL-2026-4748)
vulnerability in eplang (MAL-2026-4748). Risk of unauthorized operations or information disclosure.
MAL-2026-4764 Vulnerability in pycalendar-api (MAL-2026-4764)
vulnerability in pycalendar-api (MAL-2026-4764). Risk of unauthorized operations or information disclosure. Exploitable via ``httpxyz``.
CVE-2026-39250 Vulnerability in CVE-2026-39250 (CVE-2026-39250)
vulnerability in CVE-2026-39250 (CVE-2026-39250). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-32882 Vulnerability in libheif (DEBIAN-CVE-2026-32882)
vulnerability in libheif (DEBIAN-CVE-2026-32882). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-32814 Vulnerability in libheif (DEBIAN-CVE-2026-32814)
vulnerability in libheif (DEBIAN-CVE-2026-32814). Confidential information can be exposed externally.
DEBIAN-CVE-2026-32741 Vulnerability in libheif (DEBIAN-CVE-2026-32741)
vulnerability in libheif (DEBIAN-CVE-2026-32741). Risk of unauthorized operations or information disclosure.
CVE-2026-34233 Vulnerability in CVE-2026-34233 (CVE-2026-34233)
vulnerability in CVE-2026-34233 (CVE-2026-34233). Confidential information can be exposed externally.
CVE-2026-34216 Vulnerability in CVE-2026-34216 (CVE-2026-34216)
vulnerability in CVE-2026-34216 (CVE-2026-34216). Successful exploitation can lead to full system takeover.
CVE-2026-32882 Out-of-Bounds Read in dos (CVE-2026-32882)
vulnerability in dos (CVE-2026-32882). Risk of unauthorized operations or information disclosure.
CVE-2026-32814 Information Disclosure in CVE-2026-32814 (CVE-2026-32814)
vulnerability in CVE-2026-32814 (CVE-2026-32814). Confidential information can be exposed externally.
CVE-2026-32741 Vulnerability in CVE-2026-32741 (CVE-2026-32741)
vulnerability in CVE-2026-32741 (CVE-2026-32741). Risk of unauthorized operations or information disclosure.
CVE-2025-57798 Vulnerability in dos (CVE-2025-57798)
vulnerability in dos (CVE-2025-57798). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779225366 Vulnerability in libxml2 (CLSA-2026-1779225366)
vulnerability in libxml2 (CLSA-2026-1779225366). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.13-12.el9_6.tuxcare.els4` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →