Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-45089 |
|
Vulnerability in github.com/hahwul/dalfox/v2 (CVE-2026-45089)
vulnerability in github.com/hahwul/dalfox/v2 (CVE-2026-45089). Data can be tampered with by attackers. Exploitable via ``output``. Mitigation: upgrade to `2.13.0` or later.
|
| CVE-2026-45088 |
|
Vulnerability in github.com/hahwul/dalfox/v2 (CVE-2026-45088)
vulnerability in github.com/hahwul/dalfox/v2 (CVE-2026-45088). Confidential information can be exposed externally. Exploitable via ``model.Options``. Mitigation: upgrade to `2.13.0` or later.
|
| CVE-2026-45087 |
|
Vulnerability in github.com/hahwul/dalfox/v2 (CVE-2026-45087)
vulnerability in github.com/hahwul/dalfox/v2 (CVE-2026-45087). Successful exploitation can lead to full system takeover. Exploitable via `POST /scan`. Mitigation: upgrade to `2.13.0` or later.
|
| CVE-2026-44295 |
|
Code Injection in protobufjs-cli (CVE-2026-44295)
code injection in protobufjs-cli (CVE-2026-44295). Confidential information can be exposed externally. Exploitable via ``pbjs``. Mitigation: upgrade to `2.0.2` or later.
|
| CVE-2026-44294 |
|
Vulnerability in protobufjs (CVE-2026-44294)
vulnerability in protobufjs (CVE-2026-44294). Risk of unauthorized operations or information disclosure. Exploitable via ``fromObject``. Mitigation: upgrade to `8.0.2` or later.
|
| CVE-2026-44293 |
|
Code Injection in protobufjs (CVE-2026-44293)
code injection in protobufjs (CVE-2026-44293). Successful exploitation can lead to full system takeover. Exploitable via ``toObject``. Mitigation: upgrade to `8.0.2` or later.
|
| CVE-2026-44292 |
|
Vulnerability in protobufjs (CVE-2026-44292)
vulnerability in protobufjs (CVE-2026-44292). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `8.0.2` or later.
|
| CVE-2026-44291 |
|
Vulnerability in protobufjs (CVE-2026-44291)
vulnerability in protobufjs (CVE-2026-44291). Successful exploitation can lead to full system takeover. Exploitable via ``Object.prototype``. Mitigation: upgrade to `8.0.2` or later.
|
| CVE-2026-44290 |
|
Vulnerability in protobufjs (CVE-2026-44290)
vulnerability in protobufjs (CVE-2026-44290). Risk of unauthorized operations or information disclosure. Exploitable via ``parse``. Mitigation: upgrade to `8.0.2` or later.
|
| CVE-2026-44289 |
|
Vulnerability in protobufjs (CVE-2026-44289)
vulnerability in protobufjs (CVE-2026-44289). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.2` or later.
|
| MINI-5cq5-f8h3-v6q3 |
|
MINI-5cq5-f8h3-v6q3 |
| MINI-gxqc-jpcg-x2q3 |
|
MINI-gxqc-jpcg-x2q3 |
| CVE-2026-44288 |
|
Vulnerability in protobufjs (CVE-2026-44288)
vulnerability in protobufjs (CVE-2026-44288). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.2` or later.
|
| CVE-2026-42290 |
|
OS Command Injection in protobufjs-cli (CVE-2026-42290)
OS command injection in protobufjs-cli (CVE-2026-42290). Successful exploitation can lead to full system takeover. Exploitable via ``pbts``. Mitigation: upgrade to `2.0.2` or later.
|
| USN-8270-1 |
|
Vulnerability in exim4 (USN-8270-1)
vulnerability in exim4 (USN-8270-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.95-4ubuntu2.8` or later.
|
| DEBIAN-CVE-2026-8391 |
|
Vulnerability in firefox-esr (DEBIAN-CVE-2026-8391)
vulnerability in firefox-esr (DEBIAN-CVE-2026-8391). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `140.11.0esr-1~deb11u1` or later.
|
| CVE-2026-8391 |
|
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3.
Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3.
|
| CVE-2026-8390 |
|
Use-After-Free in mozilla (CVE-2026-8390)
vulnerability in mozilla (CVE-2026-8390). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-8388 |
|
Vulnerability in firefox-esr (DEBIAN-CVE-2026-8388)
vulnerability in firefox-esr (DEBIAN-CVE-2026-8388). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `140.11.0esr-1~deb11u1` or later.
|
| CVE-2026-8389 |
|
Buffer Overflow in mozilla (CVE-2026-8389)
vulnerability in mozilla (CVE-2026-8389). Successful exploitation can lead to full system takeover.
|
| CVE-2026-8388 |
|
Buffer Overflow in mozilla (CVE-2026-8388)
vulnerability in mozilla (CVE-2026-8388). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6865 |
|
Path Traversal in path-traversal (CVE-2026-6865)
path traversal in path-traversal (CVE-2026-6865). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-43930 |
|
Vulnerability in parse-server (CVE-2026-43930)
vulnerability in parse-server (CVE-2026-43930). Data can be tampered with by attackers. Exploitable via ``applyAuthDataOptimisticLock``. Mitigation: upgrade to `8.6.76` or later.
|
| CVE-2026-43916 |
|
Out-of-Bounds Read in c (CVE-2026-43916)
vulnerability in c (CVE-2026-43916). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.2.0-alpha` or later.
|
| DEBIAN-CVE-2026-42006 |
|
Vulnerability in dovecot (DEBIAN-CVE-2026-42006)
vulnerability in dovecot (DEBIAN-CVE-2026-42006). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.13+dfsg1-2+deb11u4` or later.
|
| CVE-2026-42006 |
|
Vulnerability in dovecot (CVE-2026-42006)
vulnerability in dovecot (CVE-2026-42006). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40638 |
|
Vulnerability in dell (CVE-2026-40638)
vulnerability in dell (CVE-2026-40638). Successful exploitation can lead to full system takeover.
|
| DEBIAN-CVE-2026-40020 |
|
Vulnerability in dovecot (DEBIAN-CVE-2026-40020)
vulnerability in dovecot (DEBIAN-CVE-2026-40020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.13+dfsg1-2+deb11u4` or later.
|
| DEBIAN-CVE-2026-40016 |
|
Vulnerability in dovecot (DEBIAN-CVE-2026-40016)
vulnerability in dovecot (DEBIAN-CVE-2026-40016). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.19.1+dfsg1-2.1+deb12u6` or later.
|
| CVE-2026-40020 |
|
Vulnerability in dovecot (CVE-2026-40020)
vulnerability in dovecot (CVE-2026-40020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40016 |
|
Vulnerability in dovecot (CVE-2026-40016)
vulnerability in dovecot (CVE-2026-40016). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35071 |
|
OS Command Injection in dell (CVE-2026-35071)
OS command injection in dell (CVE-2026-35071). Successful exploitation can lead to full system takeover.
|
| DEBIAN-CVE-2026-33603 |
|
Vulnerability in dovecot (DEBIAN-CVE-2026-33603)
vulnerability in dovecot (DEBIAN-CVE-2026-33603). Confidential information can be exposed externally. Mitigation: upgrade to `1:2.3.13+dfsg1-2+deb11u4` or later.
|
| CVE-2026-33603 |
|
Vulnerability in dovecot (CVE-2026-33603)
vulnerability in dovecot (CVE-2026-33603). Confidential information can be exposed externally.
|
| DEBIAN-CVE-2026-27851 |
|
Vulnerability in dovecot (DEBIAN-CVE-2026-27851)
vulnerability in dovecot (DEBIAN-CVE-2026-27851). Confidential information can be exposed externally. Mitigation: upgrade to `1:2.4.1+dfsg1-6+deb13u6` or later.
|
| CVE-2026-27851 |
|
Vulnerability in dovecot (CVE-2026-27851)
vulnerability in dovecot (CVE-2026-27851). Confidential information can be exposed externally.
|
| CVE-2025-12659 |
|
Vulnerability in CVE-2025-12659 (CVE-2025-12659)
vulnerability in CVE-2025-12659 (CVE-2025-12659). Successful exploitation can lead to full system takeover.
|
| SUSE-SU-2026:21616-1 |
|
Vulnerability in SUSE-SU-2026:21616-1 (SUSE-SU-2026:21616-1)
vulnerability in SUSE-SU-2026:21616-1 (SUSE-SU-2026:21616-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21610-1 |
|
Vulnerability in SUSE-SU-2026:21610-1 (SUSE-SU-2026:21610-1)
vulnerability in SUSE-SU-2026:21610-1 (SUSE-SU-2026:21610-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21590-1 |
|
Vulnerability in SUSE-SU-2026:21590-1 (SUSE-SU-2026:21590-1)
vulnerability in SUSE-SU-2026:21590-1 (SUSE-SU-2026:21590-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21594-1 |
|
Vulnerability in kernel-obs-build (SUSE-SU-2026:21594-1)
vulnerability in kernel-obs-build (SUSE-SU-2026:21594-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0-160000.30.1` or later.
|
| CVE-2026-4827 |
|
Vulnerability in CVE-2026-4827 (CVE-2026-4827)
vulnerability in CVE-2026-4827 (CVE-2026-4827). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21608-1 |
|
Vulnerability in SUSE-SU-2026:21608-1 (SUSE-SU-2026:21608-1)
vulnerability in SUSE-SU-2026:21608-1 (SUSE-SU-2026:21608-1). Risk of unauthorized operations or information disclosure.
|
| openSUSE-SU-2026:20742-1 |
|
Vulnerability in openSUSE-SU-2026:20742-1 (openSUSE-SU-2026:20742-1)
vulnerability in openSUSE-SU-2026:20742-1 (openSUSE-SU-2026:20742-1). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-PYPI-CVE-2026-26007 |
|
Vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2026-26007)
vulnerability in rootio-cryptography (ROOT-APP-PYPI-CVE-2026-26007). Confidential information can be exposed externally. Mitigation: upgrade to `45.0.5+root.io.1, 41.0.7+root.io.2, 46.0.4+root.io.1, 43.0.1+root.io.1, 44.0.1+root.io.1, 42.0.5+root.io.1, 45.0.4+root.io.1, 42.0.8+root.io.1, 46.0.4+root.io.2, 45.0.5+root.io.2, 45.0.5+root.io.3, 46.0.3+root.io.1, 46.0.3+root.io.2, 46.0.3+root.io.3, 42.0.8+root.io.2, 42.0.8+root.io.3, 42.0.8+root.io.4, 42.0.8+root.io.6, 42.0.8+root.io.7, 45.0.5+root.io.4, 42.0.8+root.io.9, 42.0.8+root.io.10, 43.0.1+root.io.2, 42.0.5+root.io.2, 41.0.7+root.io.3, 43.0.1+root.io.3` or later.
|
| ROOT-APP-NPM-CVE-2026-44457 |
|
Vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-44457)
vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-44457). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.14-root.io.3, 4.12.14-root.io.1, 4.12.14-root.io.2, 4.12.14-root.io.4` or later.
|
| ROOT-APP-NPM-CVE-2026-44458 |
|
Vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-44458)
vulnerability in @rootio/hono (ROOT-APP-NPM-CVE-2026-44458). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.14-root.io.3, 4.12.14-root.io.1, 4.12.14-root.io.2, 4.12.14-root.io.4` or later.
|
| MAL-2026-3613 |
|
Vulnerability in aoflcorp (MAL-2026-3613)
vulnerability in aoflcorp (MAL-2026-3613). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-MAVEN-CVE-2026-42585 |
|
Vulnerability in io.root.io.netty:netty-codec-http (ROOT-APP-MAVEN-CVE-2026-42585)
vulnerability in io.root.io.netty:netty-codec-http (ROOT-APP-MAVEN-CVE-2026-42585). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.126.Final-root.io.12, 4.1.126.Final-root.io.13, 4.1.115.Final-root.io.3, 4.1.115.Final-root.io.4, 4.1.115.Final-root.io.5, 4.1.115.Final-root.io.6, 4.1.126.Final-root.io.14, 4.1.115.Final-root.io.8, 4.1.118.Final-root.io.16, 4.1.126.Final-root.io.15, 4.1.126.Final-root.io.16, 4.1.118.Final-root.io.17, 4.1.118.Final-root.io.18` or later.
|
| ROOT-APP-MAVEN-CVE-2026-42581 |
|
Vulnerability in io.root.io.netty:netty-codec-http (ROOT-APP-MAVEN-CVE-2026-42581)
vulnerability in io.root.io.netty:netty-codec-http (ROOT-APP-MAVEN-CVE-2026-42581). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.1.126.Final-root.io.11, 4.1.126.Final-root.io.12, 4.1.126.Final-root.io.13, 4.1.126.Final-root.io.14, 4.1.118.Final-root.io.16, 4.1.126.Final-root.io.15, 4.1.126.Final-root.io.16, 4.1.118.Final-root.io.17, 4.1.118.Final-root.io.18` or later.
|