Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| GHSA-cjgp-rvr9-v9w4 |
|
Vulnerability in psxjson (GHSA-cjgp-rvr9-v9w4)
vulnerability in psxjson (GHSA-cjgp-rvr9-v9w4). Risk of unauthorized operations or information disclosure.
|
| BELL-CVE-2026-42899 |
|
BELL-CVE-2026-42899 |
| BELL-CVE-2026-35433 |
|
BELL-CVE-2026-35433 |
| BELL-CVE-2026-32175 |
|
BELL-CVE-2026-32175 |
| BELL-CVE-2026-32177 |
|
BELL-CVE-2026-32177 |
| openSUSE-SU-2026:20771-1 |
|
Vulnerability in openSUSE-SU-2026:20771-1 (openSUSE-SU-2026:20771-1)
vulnerability in openSUSE-SU-2026:20771-1 (openSUSE-SU-2026:20771-1). Risk of unauthorized operations or information disclosure.
|
| BELL-CVE-2025-35979 |
|
BELL-CVE-2025-35979 |
| MAL-2026-4169 |
|
Vulnerability in paysafe-gbp-virtual-assistant-lib-fe (MAL-2026-4169)
vulnerability in paysafe-gbp-virtual-assistant-lib-fe (MAL-2026-4169). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8912 |
|
SQL Injection in wordpress (CVE-2026-8912)
SQL injection in wordpress (CVE-2026-8912). Confidential information can be exposed externally.
|
| CVE-2026-4883 |
|
Unrestricted File Upload in wordpress (CVE-2026-4883)
vulnerability in wordpress (CVE-2026-4883). Successful exploitation can lead to full system takeover.
|
| DEBIAN-CVE-2026-43492 |
|
Vulnerability in linux (DEBIAN-CVE-2026-43492)
vulnerability in linux (DEBIAN-CVE-2026-43492). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.88-1` or later.
|
| DEBIAN-CVE-2026-43493 |
|
Vulnerability in linux (DEBIAN-CVE-2026-43493)
vulnerability in linux (DEBIAN-CVE-2026-43493). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.12.86-1` or later.
|
| DEBIAN-CVE-2026-43491 |
|
Vulnerability in linux (DEBIAN-CVE-2026-43491)
vulnerability in linux (DEBIAN-CVE-2026-43491). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.86-1` or later.
|
| ROOT-APP-PYPI-CVE-2026-27205 |
|
Vulnerability in rootio-Flask (ROOT-APP-PYPI-CVE-2026-27205)
vulnerability in rootio-Flask (ROOT-APP-PYPI-CVE-2026-27205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.2+root.io.1, 3.1.2+root.io.2, 3.1.1+root.io.1, 3.1.1+root.io.2, 3.1.2+root.io.3` or later.
|
| CLSA-2026-1779193855 |
|
Vulnerability in ImageMagick (CLSA-2026-1779193855)
vulnerability in ImageMagick (CLSA-2026-1779193855). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.13.25-1.el8_5.tuxcare.els30` or later.
|
| ROOT-APP-MAVEN-CVE-2018-1000632 |
|
Vulnerability in io.root.dom4j:dom4j (ROOT-APP-MAVEN-CVE-2018-1000632)
vulnerability in io.root.dom4j:dom4j (ROOT-APP-MAVEN-CVE-2018-1000632). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1-root.io.1, 1.1-root.io.2` or later.
|
| ROOT-APP-MAVEN-CVE-2020-10683 |
|
Vulnerability in io.root.dom4j:dom4j (ROOT-APP-MAVEN-CVE-2020-10683)
vulnerability in io.root.dom4j:dom4j (ROOT-APP-MAVEN-CVE-2020-10683). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1-root.io.1, 1.1-root.io.2` or later.
|
| ROOT-APP-PYPI-CVE-2024-35195 |
|
Vulnerability in rootio-requests (ROOT-APP-PYPI-CVE-2024-35195)
vulnerability in rootio-requests (ROOT-APP-PYPI-CVE-2024-35195). Confidential information can be exposed externally. Mitigation: upgrade to `2.25.1+root.io.3, 2.25.1+root.io.4, 2.19.0+root.io.3, 2.19.0+root.io.4, 2.28.1+root.io.1, 2.28.2+root.io.1, 2.29.0+root.io.1, 2.30.0+root.io.2, 2.31.0+root.io.3, 2.25.1+root.io.5, 2.28.2+root.io.2, 2.31.0+root.io.4, 2.30.0+root.io.3, 2.29.0+root.io.2, 2.28.1+root.io.2, 2.17.0+root.io.5, 2.25.1+root.io.6` or later.
|
| CLSA-2026-1779183103 |
|
Vulnerability in vim-X11 (CLSA-2026-1779183103)
vulnerability in vim-X11 (CLSA-2026-1779183103). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.0.1763-19.el8.4.tuxcare.els2` or later.
|
| CVE-2026-7860 |
|
Vulnerability in com.vaadin:flow-plugins (CVE-2026-7860)
vulnerability in com.vaadin:flow-plugins (CVE-2026-7860). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `25.1.5` or later.
|
| CVE-2026-7571 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-7571)
vulnerability in org.keycloak:keycloak-services (CVE-2026-7571). Confidential information can be exposed externally. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-7507 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-7507)
vulnerability in org.keycloak:keycloak-services (CVE-2026-7507). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-7504 |
|
Open Redirect in org.keycloak:keycloak-services (CVE-2026-7504)
vulnerability in org.keycloak:keycloak-services (CVE-2026-7504). Confidential information can be exposed externally. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-7307 |
|
Vulnerability in org.keycloak:keycloak-saml-core (CVE-2026-7307)
vulnerability in org.keycloak:keycloak-saml-core (CVE-2026-7307). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-4630 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-4630)
vulnerability in org.keycloak:keycloak-services (CVE-2026-4630). Confidential information can be exposed externally. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-45442 |
|
Vulnerability in CVE-2026-45442 (CVE-2026-45442)
vulnerability in CVE-2026-45442 (CVE-2026-45442). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43493 |
|
Vulnerability in linux (CVE-2026-43493)
vulnerability in linux (CVE-2026-43493). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43492 |
|
Vulnerability in dos (CVE-2026-43492)
vulnerability in dos (CVE-2026-43492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43491 |
|
Vulnerability in linux (CVE-2026-43491)
vulnerability in linux (CVE-2026-43491). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37982 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-37982)
vulnerability in org.keycloak:keycloak-services (CVE-2026-37982). Confidential information can be exposed externally. Exploitable via ``ExecuteActionsActionToken``. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-37981 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-37981)
vulnerability in org.keycloak:keycloak-services (CVE-2026-37981). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-37979 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-37979)
vulnerability in org.keycloak:keycloak-services (CVE-2026-37979). Confidential information can be exposed externally. Mitigation: upgrade to `26.6.2` or later.
|
| CVE-2026-37978 |
|
Vulnerability in org.keycloak:keycloak-services (CVE-2026-37978)
vulnerability in org.keycloak:keycloak-services (CVE-2026-37978). Confidential information can be exposed externally. Mitigation: upgrade to `26.6.2` or later.
|
| UBUNTU-CVE-2026-43492 |
|
Vulnerability in linux-aws (UBUNTU-CVE-2026-43492)
vulnerability in linux-aws (UBUNTU-CVE-2026-43492). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-43493 |
|
Vulnerability in linux (UBUNTU-CVE-2026-43493)
vulnerability in linux (UBUNTU-CVE-2026-43493). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-43491 |
|
Vulnerability in linux-hwe-edge (UBUNTU-CVE-2026-43491)
vulnerability in linux-hwe-edge (UBUNTU-CVE-2026-43491). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-NPM-CVE-2025-15284 |
|
Vulnerability in @rootio/qs (ROOT-APP-NPM-CVE-2025-15284)
vulnerability in @rootio/qs (ROOT-APP-NPM-CVE-2025-15284). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.11.0-root.io.2, 6.14.0-root.io.1, 6.14.0-root.io.2, 6.13.0-root.io.1, 6.11.0-root.io.1, 6.5.5-root.io.1, 6.5.3-root.io.1, 6.13.0-root.io.2, 6.5.5-root.io.2, 6.14.0-root.io.3` or later.
|
| ROOT-APP-NPM-CVE-2026-2391 |
|
Vulnerability in @rootio/qs (ROOT-APP-NPM-CVE-2026-2391)
vulnerability in @rootio/qs (ROOT-APP-NPM-CVE-2026-2391). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.1-root.io.1, 6.14.0-root.io.2, 6.13.0-root.io.1, 6.13.0-root.io.2, 6.14.1-root.io.2, 6.14.0-root.io.3, 6.11.0-root.io.3, 6.13.0-root.io.1781682221, 6.13.0-root.io.1781682222, 6.14.1-root.io.3, 6.14.0-root.io.4, 6.14.2-root.io.1` or later.
|
| RLSA-2026:18065 |
|
Vulnerability in ruby (RLSA-2026:18065)
vulnerability in ruby (RLSA-2026:18065). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.3.10-12.el10_1` or later.
|
| RLSA-2026:18064 |
|
Vulnerability in libpng (RLSA-2026:18064)
vulnerability in libpng (RLSA-2026:18064). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:1.6.40-8.el10_1.4` or later.
|
| RLSA-2026:18063 |
|
Vulnerability in nginx (RLSA-2026:18063)
vulnerability in nginx (RLSA-2026:18063). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:1.26.3-2.el10_1.2` or later.
|
| RLSA-2026:18028 |
|
Vulnerability in libpng (RLSA-2026:18028)
vulnerability in libpng (RLSA-2026:18028). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:1.6.37-12.el9_7.4` or later.
|
| RLSA-2026:18039 |
|
Vulnerability in ruby (RLSA-2026:18039)
vulnerability in ruby (RLSA-2026:18039). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.0.7-166.el9_7` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33186 |
|
Vulnerability in rootio-google.golang.org/grpc (ROOT-APP-GOBINARY-CVE-2026-33186)
vulnerability in rootio-google.golang.org/grpc (ROOT-APP-GOBINARY-CVE-2026-33186). Confidential information can be exposed externally. Mitigation: upgrade to `v1.72.0-root.io.1, v1.65.0-root.io.1, v1.71.0-root.io.1, v1.69.4-root.io.1, v1.57.0-root.io.1, v1.78.0-root.io.1, v1.72.1-root.io.1, v1.73.0-root.io.1, v1.57.0-root.io.2, v1.71.0-root.io.2, v1.78.0-root.io.2, v1.72.0-root.io.3, v1.69.4-root.io.2, v1.65.0-root.io.2` or later.
|
| SUSE-SU-2026:2010-1 |
|
Vulnerability in SUSE-SU-2026:2010-1 (SUSE-SU-2026:2010-1)
vulnerability in SUSE-SU-2026:2010-1 (SUSE-SU-2026:2010-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2009-1 |
|
Vulnerability in SUSE-SU-2026:2009-1 (SUSE-SU-2026:2009-1)
vulnerability in SUSE-SU-2026:2009-1 (SUSE-SU-2026:2009-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:2008-1 |
|
Vulnerability in SUSE-SU-2026:2008-1 (SUSE-SU-2026:2008-1)
vulnerability in SUSE-SU-2026:2008-1 (SUSE-SU-2026:2008-1). Risk of unauthorized operations or information disclosure.
|
| CLSA-2026-1779191237 |
|
Vulnerability in postfix (CLSA-2026-1779191237)
vulnerability in postfix (CLSA-2026-1779191237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:3.5.25-1.el9.tuxcare.els1` or later.
|
| SUSE-SU-2026:21733-1 |
|
Vulnerability in SUSE-SU-2026:21733-1 (SUSE-SU-2026:21733-1)
vulnerability in SUSE-SU-2026:21733-1 (SUSE-SU-2026:21733-1). Risk of unauthorized operations or information disclosure.
|
| GHSA-f6hv-jpgr-c835 |
|
Vulnerability in chai-as-attracted (GHSA-f6hv-jpgr-c835)
vulnerability in chai-as-attracted (GHSA-f6hv-jpgr-c835). Risk of unauthorized operations or information disclosure.
|