Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| GHSA-hr6r-2xx8-mrh9 |
|
Vulnerability in crypto-hash-sdk (GHSA-hr6r-2xx8-mrh9)
vulnerability in crypto-hash-sdk (GHSA-hr6r-2xx8-mrh9). Risk of unauthorized operations or information disclosure. Exploitable via ``import``.
|
| MAL-2026-4541 |
|
Vulnerability in crypto-hash-sdk (MAL-2026-4541)
vulnerability in crypto-hash-sdk (MAL-2026-4541). Risk of unauthorized operations or information disclosure. Exploitable via ``import``.
|
| GHSA-h7mc-23rp-vpj6 |
|
Vulnerability in xorma-js (GHSA-h7mc-23rp-vpj6)
vulnerability in xorma-js (GHSA-h7mc-23rp-vpj6). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process.execSync``.
|
| MAL-2026-4734 |
|
Vulnerability in xorma-js (MAL-2026-4734)
vulnerability in xorma-js (MAL-2026-4734). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process.execSync``.
|
| MAL-2026-4655 |
|
Vulnerability in qr-code-styling-temp (MAL-2026-4655)
vulnerability in qr-code-styling-temp (MAL-2026-4655). Risk of unauthorized operations or information disclosure. Exploitable via ``install``.
|
| CLSA-2026-1779216196 |
|
libssh2: Fix of CVE-2026-7598
libssh2: Fix of CVE-2026-7598
|
| CLSA-2026-1779215980 |
|
cups: Fix of CVE-2026-27447
cups: Fix of CVE-2026-27447
|
| MAL-2026-4478 |
|
Vulnerability in alya-baileys (MAL-2026-4478)
vulnerability in alya-baileys (MAL-2026-4478). Risk of unauthorized operations or information disclosure. Exploitable via ``connection.update``.
|
| USN-8276-1 |
|
Vulnerability in highlight.js (USN-8276-1)
vulnerability in highlight.js (USN-8276-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.2+ds-4ubuntu0.1~esm1` or later.
|
| CLSA-2026-1779215759 |
|
Vulnerability in libxml2 (CLSA-2026-1779215759)
vulnerability in libxml2 (CLSA-2026-1779215759). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.1-6.0.11.el7_9.6.tuxcare.els3` or later.
|
| CLSA-2026-1779215547 |
|
cups: Fix of CVE-2026-27447
cups: Fix of CVE-2026-27447
|
| CLSA-2026-1779215310 |
|
Vulnerability in vim-X11 (CLSA-2026-1779215310)
vulnerability in vim-X11 (CLSA-2026-1779215310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:7.4.629-8.0.1.el7_9.tuxcare.els15` or later.
|
| CLSA-2026-1779215113 |
|
fribidi: Fix of CVE-2022-25308
fribidi: Fix of CVE-2022-25308
|
| CLSA-2026-1779214855 |
|
bind: Fix of CVE-2026-1519
bind: Fix of CVE-2026-1519
|
| CVE-2026-8605 |
|
Vulnerability in scadabr (CVE-2026-8605)
vulnerability in scadabr (CVE-2026-8605). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8604 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-8604)
vulnerability in csrf (CVE-2026-8604). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8603 |
|
OS Command Injection in scadabr (CVE-2026-8603)
OS command injection in scadabr (CVE-2026-8603). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6009 |
|
Unsafe Deserialization in net.sf.jasperreports:jasperreports (CVE-2026-6009)
vulnerability in net.sf.jasperreports:jasperreports (CVE-2026-6009). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.7` or later.
|
| CVE-2026-47107 |
|
Vulnerability in CVE-2026-47107 (CVE-2026-47107)
vulnerability in CVE-2026-47107 (CVE-2026-47107). Confidential information can be exposed externally.
|
| DEBIAN-CVE-2026-33633 |
|
Vulnerability in kitty (DEBIAN-CVE-2026-33633)
vulnerability in kitty (DEBIAN-CVE-2026-33633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.41.1-2+deb13u1` or later.
|
| CVE-2026-33633 |
|
Vulnerability in dos (CVE-2026-33633)
vulnerability in dos (CVE-2026-33633). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32134 |
|
Vulnerability in CVE-2026-32134 (CVE-2026-32134)
vulnerability in CVE-2026-32134 (CVE-2026-32134). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-61081 |
|
Vulnerability in CVE-2025-61081 (CVE-2025-61081)
vulnerability in CVE-2025-61081 (CVE-2025-61081). Data can be tampered with by attackers.
|
| UBUNTU-CVE-2026-33633 |
|
Vulnerability in kitty (UBUNTU-CVE-2026-33633)
vulnerability in kitty (UBUNTU-CVE-2026-33633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.41.1-2+deb13u1build0.25.10.1` or later.
|
| MAL-2026-4729 |
|
Vulnerability in whiteboard-agent (MAL-2026-4729)
vulnerability in whiteboard-agent (MAL-2026-4729). Risk of unauthorized operations or information disclosure. Exploitable via ``admin``.
|
| CLSA-2026-1779214181 |
|
Vulnerability in vim-X11 (CLSA-2026-1779214181)
vulnerability in vim-X11 (CLSA-2026-1779214181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-22.el9_6.1.tuxcare.els25` or later.
|
| MAL-2026-4522 |
|
Vulnerability in claude-all-config (MAL-2026-4522)
vulnerability in claude-all-config (MAL-2026-4522). Risk of unauthorized operations or information disclosure. Exploitable via ``gemini``.
|
| SUSE-SU-2026:21724-1 |
|
Vulnerability in SUSE-SU-2026:21724-1 (SUSE-SU-2026:21724-1)
vulnerability in SUSE-SU-2026:21724-1 (SUSE-SU-2026:21724-1). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4441 |
|
Vulnerability in @shadanai/openclaw (MAL-2026-4441)
vulnerability in @shadanai/openclaw (MAL-2026-4441). Risk of unauthorized operations or information disclosure. Exploitable via ``controlUi.allowedOrigins``.
|
| MAL-2026-4370 |
|
Vulnerability in @bonsai-ai/claude-code (MAL-2026-4370)
vulnerability in @bonsai-ai/claude-code (MAL-2026-4370). Risk of unauthorized operations or information disclosure. Exploitable via ``author``.
|
| CLSA-2026-1779213441 |
|
Vulnerability in python3.11 (CLSA-2026-1779213441)
vulnerability in python3.11 (CLSA-2026-1779213441). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.11-2.el9_6.2.tuxcare.els8` or later.
|
| GHSA-fg63-2vqh-93xf |
|
Vulnerability in corelia (GHSA-fg63-2vqh-93xf)
vulnerability in corelia (GHSA-fg63-2vqh-93xf). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4371 |
|
Vulnerability in @bonsai-ai/claude-code-win32-x64 (MAL-2026-4371)
vulnerability in @bonsai-ai/claude-code-win32-x64 (MAL-2026-4371). Risk of unauthorized operations or information disclosure. Exploitable via ``LICENSE.md``.
|
| CLSA-2026-1779212665 |
|
Vulnerability in php (CLSA-2026-1779212665)
vulnerability in php (CLSA-2026-1779212665). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.3-50.el6_10.tuxcare.ol.els21` or later.
|
| CLSA-2026-1779212372 |
|
Vulnerability in vim-X11 (CLSA-2026-1779212372)
vulnerability in vim-X11 (CLSA-2026-1779212372). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3:7.4.629-5.2.el6.tuxcare.els51` or later.
|
| MAL-2026-4628 |
|
Vulnerability in open-agents-ai (MAL-2026-4628)
vulnerability in open-agents-ai (MAL-2026-4628). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1779212122 |
|
sos: Fix of CVE-2022-2806
sos: Fix of CVE-2022-2806
|
| openSUSE-SU-2026:20783-1 |
|
Vulnerability in openSUSE-SU-2026:20783-1 (openSUSE-SU-2026:20783-1)
vulnerability in openSUSE-SU-2026:20783-1 (openSUSE-SU-2026:20783-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21824-1 |
|
Vulnerability in SUSE-SU-2026:21824-1 (SUSE-SU-2026:21824-1)
vulnerability in SUSE-SU-2026:21824-1 (SUSE-SU-2026:21824-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21754-1 |
|
Vulnerability in SUSE-SU-2026:21754-1 (SUSE-SU-2026:21754-1)
vulnerability in SUSE-SU-2026:21754-1 (SUSE-SU-2026:21754-1). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20784-1 |
|
Vulnerability in openSUSE-SU-2026:20784-1 (openSUSE-SU-2026:20784-1)
vulnerability in openSUSE-SU-2026:20784-1 (openSUSE-SU-2026:20784-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ngx_stream_ssl_module``.
|
| SUSE-SU-2026:21823-1 |
|
Vulnerability in SUSE-SU-2026:21823-1 (SUSE-SU-2026:21823-1)
vulnerability in SUSE-SU-2026:21823-1 (SUSE-SU-2026:21823-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ngx_stream_ssl_module``.
|
| MAL-2026-4674 |
|
Vulnerability in superacli (MAL-2026-4674)
vulnerability in superacli (MAL-2026-4674). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5511 |
|
Vulnerability in tp-link (CVE-2026-5511)
vulnerability in tp-link (CVE-2026-5511). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47358 |
|
Vulnerability in ssrf (CVE-2026-47358)
vulnerability in ssrf (CVE-2026-47358). Confidential information can be exposed externally.
|
| CVE-2026-47357 |
|
Vulnerability in ssrf (CVE-2026-47357)
vulnerability in ssrf (CVE-2026-47357). Confidential information can be exposed externally. Exploitable via `POST /v1/{iac}/{iacVersion}/{cloud}/remote/dir/scan`.
|
| CVE-2026-47356 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-47356)
SSRF in ssrf (CVE-2026-47356). Confidential information can be exposed externally. Exploitable via `POST /v1/{iac}/{iacVersion}/{cloud}/local/file/scan`.
|
| CVE-2026-36829 |
|
Path Traversal in path-traversal (CVE-2026-36829)
path traversal in path-traversal (CVE-2026-36829). Successful exploitation can lead to full system takeover.
|
| CVE-2026-36828 |
|
OS Command Injection in CVE-2026-36828 (CVE-2026-36828)
OS command injection in CVE-2026-36828 (CVE-2026-36828). Successful exploitation can lead to full system takeover.
|
| CVE-2026-36827 |
|
OS Command Injection in CVE-2026-36827 (CVE-2026-36827)
OS command injection in CVE-2026-36827 (CVE-2026-36827). Risk of unauthorized operations or information disclosure.
|