Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-3629 |
|
Vulnerability in github.com/BufferZoneCorp/net-helper (MAL-2026-3629)
vulnerability in github.com/BufferZoneCorp/net-helper (MAL-2026-3629). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-3620 |
|
Vulnerability in github.com/BufferZoneCorp/config-loader (MAL-2026-3620)
vulnerability in github.com/BufferZoneCorp/config-loader (MAL-2026-3620). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-3653 |
|
Vulnerability in @design-system-coopeuch/web (MAL-2026-3653)
vulnerability in @design-system-coopeuch/web (MAL-2026-3653). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| JLSEC-2026-493 |
|
JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
|
| JLSEC-2026-494 |
|
Vulnerability in GraphicsMagick_jll (JLSEC-2026-494)
vulnerability in GraphicsMagick_jll (JLSEC-2026-494). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.47+0` or later.
|
| JLSEC-2026-495 |
|
Vulnerability in GraphicsMagick_jll (JLSEC-2026-495)
vulnerability in GraphicsMagick_jll (JLSEC-2026-495). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.47+0` or later.
|
| CVE-2026-44720 |
|
Authentication Bypass in openlearnx (CVE-2026-44720)
authentication bypass in openlearnx (CVE-2026-44720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.4` or later.
|
| CVE-2026-45028 |
|
Vulnerability in astro (CVE-2026-45028)
vulnerability in astro (CVE-2026-45028). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.10` or later.
|
| CVE-2026-44697 |
|
Vulnerability in github.com/klever-io/klever-go (CVE-2026-44697)
vulnerability in github.com/klever-io/klever-go (CVE-2026-44697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44681 |
|
Open Redirect in authlib (CVE-2026-44681)
vulnerability in authlib (CVE-2026-44681). Risk of unauthorized operations or information disclosure. Exploitable via `GET /oauth/authorize`. Mitigation: upgrade to `3be08468` or later.
|
| CVE-2026-44672 |
|
Code Injection in org.mapfish.print:print-lib (CVE-2026-44672)
code injection in org.mapfish.print:print-lib (CVE-2026-44672). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.3` or later.
|
| MAL-2026-3686 |
|
Vulnerability in amino-fix (MAL-2026-3686)
vulnerability in amino-fix (MAL-2026-3686). Risk of unauthorized operations or information disclosure. Exploitable via ``aminoed.uk.to``.
|
| OSV-2026-720 |
|
Vulnerability in libcoap (OSV-2026-720)
vulnerability in libcoap (OSV-2026-720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13139e7be9cdb19a3eca3e170ae49261730473f8` or later.
|
| ALSA-2026:16692 |
|
Vulnerability in jq (ALSA-2026:16692)
vulnerability in jq (ALSA-2026:16692). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.1-11.el10_1.0.2` or later.
|
| UBUNTU-CVE-2026-8368 |
|
Vulnerability in libwww-perl (UBUNTU-CVE-2026-8368)
vulnerability in libwww-perl (UBUNTU-CVE-2026-8368). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `6.61-1ubuntu0.1` or later.
|
| UBUNTU-CVE-2026-8401 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8401)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8401). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-8388 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8388)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8388). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-8430 |
|
Vulnerability in spip (UBUNTU-CVE-2026-8430)
vulnerability in spip (UBUNTU-CVE-2026-8430). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-8390 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8390)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8390). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-8389 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8389)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8389). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-8429 |
|
Vulnerability in spip (UBUNTU-CVE-2026-8429)
vulnerability in spip (UBUNTU-CVE-2026-8429). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-8391 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8391)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8391). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-5089 |
|
Vulnerability in libyaml-syck-perl (UBUNTU-CVE-2026-5089)
vulnerability in libyaml-syck-perl (UBUNTU-CVE-2026-5089). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-46300 |
|
Vulnerability in linux (UBUNTU-CVE-2026-46300)
vulnerability in linux (UBUNTU-CVE-2026-46300). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.15.0-1109.116~20.04.1` or later.
|
| UBUNTU-CVE-2026-44931 |
|
Vulnerability in malcontent (UBUNTU-CVE-2026-44931)
vulnerability in malcontent (UBUNTU-CVE-2026-44931). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-43515 |
|
Vulnerability in tomcat6 (UBUNTU-CVE-2026-43515)
vulnerability in tomcat6 (UBUNTU-CVE-2026-43515). Confidential information can be exposed externally. Mitigation: upgrade to `6.0.39-1ubuntu0.1+esm3` or later.
|
| UBUNTU-CVE-2026-44378 |
|
Vulnerability in botan3 (UBUNTU-CVE-2026-44378)
vulnerability in botan3 (UBUNTU-CVE-2026-44378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.12.0` or later.
|
| UBUNTU-CVE-2026-44167 |
|
Vulnerability in php-phpseclib (UBUNTU-CVE-2026-44167)
vulnerability in php-phpseclib (UBUNTU-CVE-2026-44167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.29` or later.
|
| UBUNTU-CVE-2026-43916 |
|
(pam_authnft is a PAM session module binding nftables firewall rules to ...) |
| UBUNTU-CVE-2026-42498 |
|
Vulnerability in tomcat6 (UBUNTU-CVE-2026-42498)
vulnerability in tomcat6 (UBUNTU-CVE-2026-42498). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.16-3ubuntu0.18.04.2+esm8` or later.
|
| UBUNTU-CVE-2026-42006 |
|
Vulnerability in dovecot (UBUNTU-CVE-2026-42006)
vulnerability in dovecot (UBUNTU-CVE-2026-42006). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
|
| UBUNTU-CVE-2026-41293 |
|
Vulnerability in tomcat6 (UBUNTU-CVE-2026-41293)
vulnerability in tomcat6 (UBUNTU-CVE-2026-41293). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.0.16-3ubuntu0.18.04.2+esm8` or later.
|
| UBUNTU-CVE-2026-41284 |
|
Vulnerability in tomcat6 (UBUNTU-CVE-2026-41284)
vulnerability in tomcat6 (UBUNTU-CVE-2026-41284). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.16-3ubuntu0.18.04.2+esm8` or later.
|
| UBUNTU-CVE-2026-40016 |
|
Vulnerability in dovecot (UBUNTU-CVE-2026-40016)
vulnerability in dovecot (UBUNTU-CVE-2026-40016). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
|
| UBUNTU-CVE-2026-40020 |
|
Vulnerability in dovecot (UBUNTU-CVE-2026-40020)
vulnerability in dovecot (UBUNTU-CVE-2026-40020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
|
| UBUNTU-CVE-2026-33603 |
|
Vulnerability in dovecot (UBUNTU-CVE-2026-33603)
vulnerability in dovecot (UBUNTU-CVE-2026-33603). Confidential information can be exposed externally. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
|
| UBUNTU-CVE-2026-31221 |
|
Vulnerability in pytorch (UBUNTU-CVE-2026-31221)
vulnerability in pytorch (UBUNTU-CVE-2026-31221). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-27851 |
|
Vulnerability in dovecot (UBUNTU-CVE-2026-27851)
vulnerability in dovecot (UBUNTU-CVE-2026-27851). Confidential information can be exposed externally. Mitigation: upgrade to `1:2.4.1+dfsg1-5ubuntu4.2` or later.
|
| UBUNTU-CVE-2025-54518 |
|
Vulnerability in xen (UBUNTU-CVE-2025-54518)
vulnerability in xen (UBUNTU-CVE-2025-54518). Risk of unauthorized operations or information disclosure.
|
| ALSA-2026:17075 |
|
Vulnerability in yggdrasil (ALSA-2026:17075)
vulnerability in yggdrasil (ALSA-2026:17075). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.8-5.el10_1` or later.
|
| ALSA-2026:16693 |
|
Vulnerability in jq (ALSA-2026:16693)
vulnerability in jq (ALSA-2026:16693). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6-19.el9_7.0.2` or later.
|
| openSUSE-SU-2026:10774-1 |
|
Vulnerability in perl-Text-CSV_XS (openSUSE-SU-2026:10774-1)
vulnerability in perl-Text-CSV_XS (openSUSE-SU-2026:10774-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.620.0-1.1` or later.
|
| openSUSE-SU-2026:10775-1 |
|
Vulnerability in rsync (openSUSE-SU-2026:10775-1)
vulnerability in rsync (openSUSE-SU-2026:10775-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.1-5.1` or later.
|
| openSUSE-SU-2026:10772-1 |
|
Vulnerability in openexr (openSUSE-SU-2026:10772-1)
vulnerability in openexr (openSUSE-SU-2026:10772-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.11-1.1` or later.
|
| openSUSE-SU-2026:10776-1 |
|
Vulnerability in tekton-cli (openSUSE-SU-2026:10776-1)
vulnerability in tekton-cli (openSUSE-SU-2026:10776-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.45.0-1.1` or later.
|
| openSUSE-SU-2026:10773-1 |
|
Vulnerability in perl-CryptX (openSUSE-SU-2026:10773-1)
vulnerability in perl-CryptX (openSUSE-SU-2026:10773-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.89.0-1.1` or later.
|
| openSUSE-SU-2026:10771-1 |
|
Vulnerability in google-osconfig-agent (openSUSE-SU-2026:10771-1)
vulnerability in google-osconfig-agent (openSUSE-SU-2026:10771-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `20260511.00-1.1` or later.
|
| openSUSE-SU-2026:10767-1 |
|
Vulnerability in ffmpeg-4 (openSUSE-SU-2026:10767-1)
vulnerability in ffmpeg-4 (openSUSE-SU-2026:10767-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.6-12.1` or later.
|
| openSUSE-SU-2026:10769-1 |
|
Vulnerability in flux2-cli (openSUSE-SU-2026:10769-1)
vulnerability in flux2-cli (openSUSE-SU-2026:10769-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.7-1.1` or later.
|
| openSUSE-SU-2026:10768-1 |
|
Vulnerability in ffmpeg-7 (openSUSE-SU-2026:10768-1)
vulnerability in ffmpeg-7 (openSUSE-SU-2026:10768-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.3-3.1` or later.
|